# How are multiple conditions interpreted in Kibana rules

**URL:** <https://discuss.elastic.co/t/how-are-multiple-conditions-interpreted-in-kibana-rules/345419>\
**Category:** Elastic Observability\
**Created:** [October 19, 2023, 8:22pm UTC](https://discuss.elastic.co/t/how-are-multiple-conditions-interpreted-in-kibana-rules/345419 "2023-10-19T20:22:17Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![zvazquez](https://avatars.discourse-cdn.com/v4/letter/z/c0e974/32.png) [@zvazquez](https://discuss.elastic.co/u/zvazquez)\
**Post date:** [October 19, 2023, 8:22pm UTC](https://discuss.elastic.co/t/how-are-multiple-conditions-interpreted-in-kibana-rules/345419/1 "2023-10-19T20:22:17Z")

</div>

Hi,

Just looking for some guidance on how multiple conditions behave within a Kibana rule.

![image](https://us1.discourse-cdn.com/elastic/original/3X/3/0/300cfe550600517f0c13f3c33b7137e4c1639483.png)

For example, the screenshot above shows a rule with 2 conditions, are those conditions interpreted as an "and" operator, and the two conditions have to be fulfilled to trigger an action or as an "or" operator when either condition is fulfilled it triggers an action.

Thanks,

Zareh

---

<div class="post-metadata">

**Author:** ![maryam-saeidi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maryam-saeidi/32/126947_2.png) [@maryam-saeidi](https://discuss.elastic.co/u/maryam-saeidi)\
**Post date:** [October 26, 2023, 1:46pm UTC](https://discuss.elastic.co/t/how-are-multiple-conditions-interpreted-in-kibana-rules/345419/2 "2023-10-26T13:46:39Z")

</div>

Hi @zvazquez,

Both of the conditions need to be met in order to trigger an alert (so it's an "and" operator). You can also check this document for more information:

> **[Create a metrics threshold rule | Elastic Observability \[8.10\] | Elastic](https://www.elastic.co/guide/en/observability/current/metrics-threshold-alert.html#metrics-conditions)**

Hope that helps!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 23, 2023, 1:47pm UTC](https://discuss.elastic.co/t/how-are-multiple-conditions-interpreted-in-kibana-rules/345419/3 "2023-11-23T13:47:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.