How to create a alert in topbeat if a particular app is not running

Elastic Stack Beats
1

is it possible to make a alert if a application is not running

2

You could use an exists query for a field that exists in the document you are looking for. If the exists query returns 0 results over the last x minutes, you trigger an alert.

https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-exists-query.html

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.