Displaying nested fields in email body

Elastic Stack Kibana
1

Hi, How can I show multiple nested fields in watcher email body.
Below is my trimmed output,
{
"doc_count" : 404261,
"mnt" : {
"doc_count_error_upper_bound" : 0,
"sum_other_doc_count" : 12423,
"buckets" : [
{
"doc_count" : 4141,
"metricAgg" : {
"value" : 0.789
},
"key" : "/"
},
{
"doc_count" : 4141,
"metricAgg" : {
"value" : 0.21500000000000002
},
"key" : "/boot"
},
{
"doc_count" : 4141,
"metricAgg" : {
"value" : 0.7102178217821783
},
"key" : "/home"
},
{
"doc_count" : 4141,
"metricAgg" : {
"value" : 0.073
},
"key" : "/mqlocal"
},
{
"doc_count" : 4141,
"metricAgg" : {
"value" : 0.5148594542381068
},
"key" : "/opt"
},
{
"doc_count" : 4141,
"metricAgg" : {
"value" : 0.009000000000000001
},
"key" : "/opt/software"
},
{
"doc_count" : 4141,
"metricAgg" : {
"value" : 0.327
},
"key" : "/oraclient"
},
{
"doc_count" : 4141,
"metricAgg" : {
"value" : 0.6797858005312727
},
"key" : "/osmf/mgmt"
},
{
"doc_count" : 4141,
"metricAgg" : {
"value" : 0.315
},
"key" : "/osmf/mgmt/scheduler"
},
{
"doc_count" : 4141,
"metricAgg" : {
"value" : 0.44055228205747404
},
"key" : "/software/bea"
}
]
},
"key" : "app07"
}
I have multiple key as output like app08, app09 etc. As well I need to add condition for top 3 diskspace used.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.