This page: https://www.elastic.co/guide/en/watcher/current/watch-acknowledgment-throttling.html suggests that an action will only be executed once (until the condition becomes false and then true again). I would like to get that behavior.
However, I'm not clear on how I would achieve this "one alert per condition". I viewed this page: https://www.elastic.co/guide/en/watcher/current/actions.html. When I read that page, I see that can manually "ack" an alert, but I want the alert to work automatically as outlined in the previous paragraph -- i.e.
- alert once
- mark the alert as already triggered
- clear the "already triggered" bit when the condition becomes false
- alert again if the condition ever becomes true.