Elastic Watcher does not execute for a long time

Elastic Stack Elasticsearch
1

I have a watcher that executes every 1 minute.

Yesterday, I received an alert from the Watcher and checked if anything wrong. Then I figured out that the watcher didn't execute for 12 hours (5pm-5am). And the first execution triggered an alert.

Screen Shot 2020-04-21 at 10.41.18 AM
Screen Shot 2020-04-21 at 10.41.18 AM2880×1526 326 KB

However, when I run the scripts defined in the watcher in DevTools, filtered with the same time, I didn't see anything wrong.

Screen Shot 2020-04-21 at 10.46.58 AM
Screen Shot 2020-04-21 at 10.46.58 AM2770×1258 342 KB

For more information, the watcher will trigger alerts when aggregations.count.value < 0. The error in the execution history is due to timeout since the ES cluster is probably overloaded at that time.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.