# Event based trigger of watcher

**URL:** <https://discuss.elastic.co/t/event-based-trigger-of-watcher/251989>\
**Category:** Kibana\
**Tags:** elastic-stack-monitoring\
**Created:** [October 14, 2020, 4:41am UTC](https://discuss.elastic.co/t/event-based-trigger-of-watcher/251989 "2020-10-14T04:41:17Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![anjana1](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Post date:** [October 14, 2020, 4:41am UTC](https://discuss.elastic.co/t/event-based-trigger-of-watcher/251989/1 "2020-10-14T04:41:17Z")

</div>

**Kibana version** : 7.9

**Elasticsearch version** : 7.9

**APM Server version** : 7.9

**APM Agent language and version** : java 1.8

**Fresh install or upgraded from other version?** fresh install

**Is there anything special in your setup?** For example, are you using the Logstash or Kafka outputs? Are you using a load balancer in front of the APM Servers? Have you changed index pattern, generated custom templates, changed agent configuration etc. :-no

I have new scenario where I have to trigger an email when the value of a field changes.  
For example I have the service statuses as OK, WARN and CRITICAL.  
I have to trigger an email when the service status changes from WARN to CRITICAL .Is there a mechanism for this kind of alerting ?

---

<div class="post-metadata">

**Author:** ![thomasneirynck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thomasneirynck/32/23313_2.png) [@thomasneirynck](https://discuss.elastic.co/u/thomasneirynck)\
**Post date:** [October 14, 2020, 2:15pm UTC](https://discuss.elastic.co/t/event-based-trigger-of-watcher/251989/2 "2020-10-14T14:15:38Z")

</div>

hi @anjana1,

yes, you can start with the Kibana Alerting framework. APM and uptime have built-in alert-types for your kind of use-case [https://www.elastic.co/what-is/kibana-alerting](https://www.elastic.co/what-is/kibana-alerting)

---

<div class="post-metadata">

**Author:** ![anjana1](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Post date:** [October 14, 2020, 6:44pm UTC](https://discuss.elastic.co/t/event-based-trigger-of-watcher/251989/3 "2020-10-14T18:44:12Z")

</div>

I have enables alerts in my set up. But I don't see anything that match my requirements. Could you pls point out how exactly pls. Thanks in advance

I only see the below options in condition. How will I trigger an alert based on changes to field values

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/0/e06ef321a0a5116637a3a1911bd5b96e0aa4de46.png)

---

<div class="post-metadata">

**Author:** ![anjana1](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Post date:** [October 15, 2020, 7:08pm UTC](https://discuss.elastic.co/t/event-based-trigger-of-watcher/251989/4 "2020-10-15T19:08:21Z")

</div>

I set up Alerting and I added a condition if the value is above 20000 in the last 5 minutes send an alert. The trigger happened every minute. I keep getting the alert every minute. My use case is only if the value changes to a new value then send the alert .. How can that work . Currently it keeps sending the alert as it continuously matches the conditions.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 12, 2020, 7:08pm UTC](https://discuss.elastic.co/t/event-based-trigger-of-watcher/251989/5 "2020-11-12T19:08:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.