If I created an alert rule using elasticsearch query dsl, how can I get the corresponding search object in Discover so that I can see the logs that triggered this alert?

Tortoise May 29, 2025, 5:27am 4

Thanks @Baba_Kourouma for the details.

Please review steps provided in below blog :

Thanks!!

1 Like

Multiple Alerts in Different ATT&CK Tactics on a Single Host

Topic		Replies	Views
Alerts from Kibana/ES Elasticsearch	7	3969	July 6, 2017
Send link to search in slack Elasticsearch elastic-stack-alerting	6	1933	May 8, 2017
Alerting Rule with link to Discover Elasticsearch elastic-stack-alerting	6	409	June 18, 2024
Create Alert from index data Kibana elastic-stack-alerting	5	1874	August 16, 2022
ELK stack and monitoring/alerting Elasticsearch	4	2229	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Elasticsearch query dsl alert rule to discover search object

Related topics