I want to trigger an email, if [fs.device_name] == "C:" and [fs.used] >= "25,000,000,000". How can this be done? Any help would be appreciated.
Have you read https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html and seen the examples there?
Thanks for the link, i'll go through it and try to come up with a config. Thanks for help!!
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.