Elasticsearch query - subject line for email

Elastic Stack Kibana
1

Hello,
I used to be able to add the grouped by field in the subject line under
{{context.group}}. Did something change?

Is there another field I can use?

Kibana/ES: 8.16.1

2

Hi @erikg,

Are you referring to the email connector for the Elasticsearch query rule as covered here in the documentation? It would be good for you to confirm via a screenshot or more detail.

Let us know!

3

Hello @carly.richmond
Yes, I am using ES Query rule with email. I found that {{context.group}} didn't work in the subject line.

Here's a picture of the rule:

image
image1216×936 102 KB

After so much trial and error, the one that ended up working for me was {{alert.id}} (this shows the grouped over terms)
image

4

I'm glad you solved your issue. Thank you for sharing the solution @erikg!