Elasticsearch watcher multiple indices

Elastic Stack Elasticsearch
1

Hi All,

Please help me how to define a watcher in Elasticsearch for the following issue:
It should fire an email in case of there are no new records in index_a, but there are more than zero new records in index_b in the last hour.

Thanks.

2

Hey,

you can use the chained input two execute two search inputs and then have a script condition that checks the hit count for both.

Hope this helps!

--Alex

3

Thanks.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.