Event based trigger of watcher

[anjana1 (Anjana Asok)]

Kibana version : 7.9

Elasticsearch version : 7.9

APM Server version : 7.9

APM Agent language and version : java 1.8

Fresh install or upgraded from other version? fresh install

Is there anything special in your setup? For example, are you using the Logstash or Kafka outputs? Are you using a load balancer in front of the APM Servers? Have you changed index pattern, generated custom templates, changed agent configuration etc. :-no

I have new scenario where I have to trigger an email when the value of a field changes.
For example I have the service statuses as OK, WARN and CRITICAL.
I have to trigger an email when the service status changes from WARN to CRITICAL .Is there a mechanism for this kind of alerting ?

[thomasneirynck]

hi @anjana1,

yes, you can start with the Kibana Alerting framework. APM and uptime have built-in alert-types for your kind of use-case https://www.elastic.co/what-is/kibana-alerting

[anjana1 (Anjana Asok)]

I have enables alerts in my set up. But I don't see anything that match my requirements. Could you pls point out how exactly pls. Thanks in advance

I only see the below options in condition. How will I trigger an alert based on changes to field values

[anjana1 (Anjana Asok)]

I set up Alerting and I added a condition if the value is above 20000 in the last 5 minutes send an alert. The trigger happened every minute. I keep getting the alert every minute. My use case is only if the value changes to a new value then send the alert .. How can that work . Currently it keeps sending the alert as it continuously matches the conditions.