I want to generate an alert whenever a pod is restarted in kubernetes. I am planning to use kubernetes.container.status.restarts to identify whether pods are restarted or not. I would like to have a single elasticsearch query and generate multiple alerts one per pod per namespace which is restart…

I got the pod name by grouping over both namespace and pod name. However, let me know if there is a way to get a link to the query results which I can use to get more details about the event. Appreciate your help.

Discuss the Elastic Stack

Generate multiple alerts from elastic query

Elastic Stack Kibana

stephenb (Stephen Brown) January 18, 2024, 3:03pm 11

I Do not exactly recall but perhaps take a look at this thread It may help.

Topic		Replies	Views
Alert query for kubernetes Elasticsearch elastic-stack-alerting	7	523	March 23, 2021
Alert for kubernetes pods Elastic Observability infrastructure-observability	1	221	December 29, 2023
Alerting creating Elasticsearch elastic-stack-alerting	4	404	March 21, 2021
Alerting on log data Logs elastic-stack-alerting	4	3842	August 31, 2020
Alert query for multiple indexes Elasticsearch elastic-stack-alerting	2	1081	May 20, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Generate multiple alerts from elastic query

Related topics