I have a setup a Alert and Action for capturing HDD usage over 80%, this all works well and alerts individually based on the agent.hostname.
What I would like to do is also include the system.filesystem.mount_point (the drive with the high usage) noted in the alert. Is this possible?
It doesn't seem to be exposed by the metric alert at this time. This should be feasible to expose. I would recommend opening an enhancement request in the Kibana GitHub repository: https://github.com/elastic/kibana/issues/new?template=Feature_request.md and the team who owns the alert will be able to have a look. Feel free to link this discuss topic in the issue as well.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.