How to create a Watcher for no ingested logs for X minutes

Elastic Stack Elasticsearch
1

Hi There,

I'm using ELK 7.6. I have a question regarding watchers.

Is it possible to create a watcher that sends an alert when it detects that there are no new documents or indexes being created for the past, say 30, minutes?

Thanks,
ck

2

You should be able to adapt https://github.com/elastic/examples/tree/master/Alerting/Sample%20Watches/new_process_started for that.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.