# How to create alert monitor where hits is over 100
**URL:** https://discuss.elastic.co/t/how-to-create-alert-monitor-where-hits-is-over-100/244130
**Category:** Kibana
**Tags:** elastic-stack-alerting
**Created:** [August 7, 2020, 7:31am UTC](https://discuss.elastic.co/t/how-to-create-alert-monitor-where-hits-is-over-100/244130 "2020-08-07T07:31:56Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@jamesyone](https://discuss.elastic.co/u/jamesyone)
#### Post date: [August 7, 2020, 7:31am UTC](https://discuss.elastic.co/t/how-to-create-alert-monitor-where-hits-is-over-100/244130/1 "2020-08-07T07:31:56Z")
Hi-
Currently trying to create alert monitor in kibana where alert comes when count of certain object hits 100. For some reason, a single count triggers an alert... I want to make it so that 100 counts of the certain object than triggers an alert.. is it possible to do so? Would I just add count to the equation?
This is my current equation.. Trying to make it when 100 wafs triggers an alert!
Help is appreciated! Thanks
---
### Author:  [@sai\_kiran1](https://discuss.elastic.co/u/sai_kiran1)
#### Post date: [August 7, 2020, 8:59am UTC](https://discuss.elastic.co/t/how-to-create-alert-monitor-where-hits-is-over-100/244130/2 "2020-08-07T08:59:03Z")
Adding below condition after your search request should do that...
```auto
"condition": {
"compare": {
"ctx.payload.hits.total": {
"gte": 100
}
}
}
```
Thanks,
Sai
---
### Author:  [@jamesyone](https://discuss.elastic.co/u/jamesyone)
#### Post date: [August 10, 2020, 9:14am UTC](https://discuss.elastic.co/t/how-to-create-alert-monitor-where-hits-is-over-100/244130/3 "2020-08-10T09:14:18Z")
> [@sai\_kiran1](#):
>
> ```auto
> "condition": {
> "compare": {
> "ctx.payload.hits.total": {
> "gte": 100
> }
> }
> }
>
> ```
Hi Sai,
should i put it after aggregations?
---
### Author:  [@sai\_kiran1](https://discuss.elastic.co/u/sai_kiran1)
#### Post date: [August 11, 2020, 7:48am UTC](https://discuss.elastic.co/t/how-to-create-alert-monitor-where-hits-is-over-100/244130/4 "2020-08-11T07:48:24Z")
It Should work before/after aggregations, you can try like mentioned below
```auto
"condition": {
"compare": {
"ctx.payload.hits.total": {
"gte": 100
}
}
},
"aggregations": {}
}
```
Thanks,
Sai
---
### Author:  [@jamesyone](https://discuss.elastic.co/u/jamesyone)
#### Post date: [August 12, 2020, 5:06am UTC](https://discuss.elastic.co/t/how-to-create-alert-monitor-where-hits-is-over-100/244130/5 "2020-08-12T05:06:50Z")
Hi Sai,
I tried doing that but its not letting me update.
Did I do this right?
```
{
"size": 0,
"query": {
"bool": {
"filter": [
{
"range": {
"EdgeEndTimestamp": {
"from": "{{period_end}}||-5m",
"to": "{{period_end}}",
"include_lower": true,
"include_upper": true,
"format": "epoch_millis",
"boost": 1
}
}
},
{
"match_phrase": {
"FirewallMatchesActions": {
"query": "drop",
"slop": 0,
"zero_terms_query": "NONE",
"boost": 1
}
}
},
{
"match_phrase": {
"FirewallMatchesSources": {
"query": "waf",
"slop": 0,
"zero_terms_query": "NONE",
"boost": 1
}
}
}
],
"adjust_pure_negative": true,
"boost": 1
}
},
"condition": {
"compare": {
"ctx.payload.hits.total": {
"gte": 100
}
}
},
"aggregations": {}
```
}
James
---
### Author:  [@sai\_kiran1](https://discuss.elastic.co/u/sai_kiran1)
#### Post date: [August 13, 2020, 12:58pm UTC](https://discuss.elastic.co/t/how-to-create-alert-monitor-where-hits-is-over-100/244130/6 "2020-08-13T12:58:39Z")
James,
My bad, I was assuming the alerting is via watchers where condition can be included in painless script. Am still in 7.6 version and Alerting feature is not available. Sorry for the confusion, do let me know if you find the solution that would help me when we Upgrade.
Thanks,
Sai
---
### Author:  [@jamesyone](https://discuss.elastic.co/u/jamesyone)
#### Post date: [August 17, 2020, 3:44am UTC](https://discuss.elastic.co/t/how-to-create-alert-monitor-where-hits-is-over-100/244130/7 "2020-08-17T03:44:12Z")
BUMP
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 14, 2020, 3:44am UTC](https://discuss.elastic.co/t/how-to-create-alert-monitor-where-hits-is-over-100/244130/8 "2020-09-14T03:44:12Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.