Does Search Alert in 7.12 include query?

[Sandra_Schlichting]

Dear all =)

When I read the summary for https://github.com/elastic/kibana/pull/88528 it says

New stack alert for executing ES DSL (query only, no aggregation support) and evaluating the number of matches against a threshold condition.

But when reading

• Alerting | Kibana Guide [8.11] | Elastic
• https://www.elastic.co/guide/en/kibana/current/defining-alerts.html

I don't see any mention of how to make an alert using DSL query is done. Did that not make it into 7.12, or am I missing something?

Hugs,
Sandra =)

[mikecote (Mike)]

Hi @Sandra_Schlichting ,

The Elasticsearch query alert is definitely part of 7.12. You can find the documentation for it under "Alerting and Actions" -> "Alerts" -> "Elasticsearch query" (Elasticsearch query | Kibana Guide [7.12] | Elastic).

Hope this helps
Mike

[Sandra_Schlichting]

Dear Mike

It very much did. Thanks =)

Do you know if they are supported in the REST API, so I can automate creating and deleting them?

Hugs
Sandra =)

[mikecote (Mike)]

Absolutely, you can use the Create alert API | Kibana Guide [7.12] | Elastic to do so

Feel free to observe the request sent by the browser to see how the properties map and you can automate by using our official API.

[Sandra_Schlichting]

Wow! I had no idea that was possible. Thanks a lot =)