# Does Search Alert in 7.12 include query?

**URL:** https://discuss.elastic.co/t/does-search-alert-in-7-12-include-query/269572
**Category:** Kibana
**Created:** [April 8, 2021, 9:42am UTC](https://discuss.elastic.co/t/does-search-alert-in-7-12-include-query/269572 "2021-04-08T09:42:49Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![Sandra\_Schlichting](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sandra_schlichting/32/84122_2.png) [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)
#### Post date: [April 8, 2021, 9:42am UTC](https://discuss.elastic.co/t/does-search-alert-in-7-12-include-query/269572/1 "2021-04-08T09:42:49Z")

</div>

Dear all =)

When I read the summary for [https://github.com/elastic/kibana/pull/88528](https://github.com/elastic/kibana/pull/88528) it says

> New stack alert for executing ES DSL (query only, no aggregation support) and evaluating the number of matches against a threshold condition.

But when reading

- [Alerting | Kibana Guide [8.11] | Elastic](https://www.elastic.co/guide/en/kibana/current/alerting-getting-started.html)
- [https://www.elastic.co/guide/en/kibana/current/defining-alerts.html](https://www.elastic.co/guide/en/kibana/current/defining-alerts.html)

I don't see any mention of how to make an alert using DSL query is done. Did that not make it into 7.12, or am I missing something?

Hugs,  
Sandra =)

---

<div class="post-metadata">

### Author: ![mikecote](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikecote/32/58549_2.png) [@mikecote](https://discuss.elastic.co/u/mikecote)
#### Post date: [April 8, 2021, 9:46am UTC](https://discuss.elastic.co/t/does-search-alert-in-7-12-include-query/269572/2 "2021-04-08T09:46:38Z")

</div>

Hi @Sandra_Schlichting ,

The Elasticsearch query alert is definitely part of 7.12. You can find the documentation for it under "Alerting and Actions" -\> "Alerts" -\> "Elasticsearch query" ([Elasticsearch query | Kibana Guide [7.12] | Elastic](https://www.elastic.co/guide/en/kibana/current/alert-type-es-query.html)).

Hope this helps 🙂  
Mike

---

<div class="post-metadata">

### Author: ![Sandra\_Schlichting](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sandra_schlichting/32/84122_2.png) [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)
#### Post date: [April 8, 2021, 12:41pm UTC](https://discuss.elastic.co/t/does-search-alert-in-7-12-include-query/269572/3 "2021-04-08T12:41:27Z")

</div>

Dear Mike

It very much did. Thanks =)

Do you know if they are supported in the REST API, so I can automate creating and deleting them?

Hugs  
Sandra =)

---

<div class="post-metadata">

### Author: ![mikecote](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikecote/32/58549_2.png) [@mikecote](https://discuss.elastic.co/u/mikecote)
#### Post date: [April 8, 2021, 1:55pm UTC](https://discuss.elastic.co/t/does-search-alert-in-7-12-include-query/269572/4 "2021-04-08T13:55:42Z")

</div>

Absolutely, you can use the [Create alert API | Kibana Guide [7.12] | Elastic](https://www.elastic.co/guide/en/kibana/current/alerts-api-create.html) to do so 🙂

Feel free to observe the request sent by the browser to see how the properties map and you can automate by using our official API.

---

<div class="post-metadata">

### Author: ![Sandra\_Schlichting](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sandra_schlichting/32/84122_2.png) [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)
#### Post date: [April 8, 2021, 2:10pm UTC](https://discuss.elastic.co/t/does-search-alert-in-7-12-include-query/269572/5 "2021-04-08T14:10:36Z")

</div>

Wow! I had no idea that was possible. Thanks a lot =)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 6, 2021, 2:11pm UTC](https://discuss.elastic.co/t/does-search-alert-in-7-12-include-query/269572/6 "2021-05-06T14:11:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
