How are multiple conditions interpreted in Kibana rules

[zvazquez (Zareh Vazquez)]

Hi,

Just looking for some guidance on how multiple conditions behave within a Kibana rule.

For example, the screenshot above shows a rule with 2 conditions, are those conditions interpreted as an "and" operator, and the two conditions have to be fulfilled to trigger an action or as an "or" operator when either condition is fulfilled it triggers an action.

Thanks,

Zareh

[maryam-saeidi]

Hi @zvazquez,

Both of the conditions need to be met in order to trigger an alert (so it's an "and" operator). You can also check this document for more information:

Create a metrics threshold rule | Elastic Observability [8.10] | Elastic

Hope that helps!