I want to set up an alert that triggers whenever one of my APIs returns a 500 error. This doesn’t really fit into the usual active/recovered/flapping model since it’s more of a single event rather than something that stays active or recovers. One idea could be to have the alert automatically create…

Hello @nilsen I understand your scenario about checking an API => 500 , means an alert will be created. In next execution if it does not match the criteria the alert will be recovered but you want this to stay as Active, right? I do not think this is possible at rule level in kibana. Generally the…

How can I create an alert for one-time events?

Elastic Observability

nilsen (Christoffer André Nilsen) January 9, 2026, 8:48am 3

Sorry for a very late reply.

Yes, I think you understand it correctly. Adding an action that reports to our Jira might be the solution here.

Topic		Replies	Views
Is it possible to acknowledge an alert / watcher? Elasticsearch elastic-stack-alerting	3	1047	November 30, 2022
Bug Report: Alert behaviour after deleting its rule Kibana elastic-stack-alerting	3	418	March 24, 2023
Error managing RECOVERED alerts Kibana elastic-stack-alerting	3	1398	April 5, 2021
How alerts gets recovered? Kibana elastic-stack-alerting	0	50	April 3, 2025
How is Alert Recovery Decided? Elastic Observability elastic-stack-alerting	1	657	December 24, 2023

How can I create an alert for one-time events?

Related topics