Elasticsearch watcher multiple indices

Hi All,

Please help me how to define a watcher in Elasticsearch for the following issue:
It should fire an email in case of there are no new records in index_a, but there are more than zero new records in index_b in the last hour.



you can use the chained input two execute two search inputs and then have a script condition that checks the hit count for both.

Hope this helps!



This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.