cannot get {{ctx.payload.hits.hits.0.beats_state.beat.host}} this field "subject": "{{ctx.payload.hits.hits.0.beats_state.beat.host}} WARNING: Filebeat is down and unavilable [No. of Filebeat down: {{ctx.payload._value.size}}]", "body": { "html": "<br><br><ol><li>{{#ctx.payload._valu…

How to get the ctx.payload.hits.hits after aggregation and transform (Watcher)

system (system) Closed October 19, 2020, 9:49am 3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Watcher transform assistance Elasticsearch elastic-stack-alerting	2	439	March 6, 2020
Ctx.payload.hits.hits not working Elasticsearch elastic-stack-alerting	3	2657	June 10, 2019
Watcher email to show every hit's message separately Elasticsearch elastic-stack-alerting	4	3656	July 6, 2017
Watcher email specific field of all hits from the results Elasticsearch	5	2686	July 18, 2019
Cannot access the search results through the watch execution context - Ctx.payload.hits.total Elasticsearch elastic-stack-alerting	6	1062	April 19, 2018