# ES Query Rule : Ability to show previous value?

**URL:** <https://discuss.elastic.co/t/es-query-rule-ability-to-show-previous-value/351215>\
**Category:** Logs\
**Tags:** elastic-stack-alerting\
**Created:** [January 17, 2024, 12:04am UTC](https://discuss.elastic.co/t/es-query-rule-ability-to-show-previous-value/351215 "2024-01-17T00:04:42Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![erikg](https://avatars.discourse-cdn.com/v4/letter/e/91b2a8/32.png) [@erikg](https://discuss.elastic.co/u/erikg)\
**Post date:** [January 17, 2024, 12:04am UTC](https://discuss.elastic.co/t/es-query-rule-ability-to-show-previous-value/351215/1 "2024-01-17T00:04:42Z")

</div>

Hello,  
It's me again. I have a interesting use case for ES Query rule but was wondering if its even possible.

I was asked to create an alert and be able to show the a field like `{{_source.status}}`. This is possible.

Now the hard part, is if I can show the old/previous value in conjunction with the new value of `{{_source.status}}`.

Perhaps this possible with ES|QL?

Thanks,  
Erik

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 14, 2024, 12:05am UTC](https://discuss.elastic.co/t/es-query-rule-ability-to-show-previous-value/351215/2 "2024-02-14T00:05:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
