ES Query Rule : Ability to show previous value?

Elastic Observability Logs
1

Hello,
It's me again. I have a interesting use case for ES Query rule but was wondering if its even possible.

I was asked to create an alert and be able to show the a field like {{_source.status}}. This is possible.

Now the hard part, is if I can show the old/previous value in conjunction with the new value of {{_source.status}}.

Perhaps this possible with ES|QL?

Thanks,
Erik

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.