How to monitor events in chain or to detect if transaction was completed or not

Elastic Stack Elasticsearch
1

Hello Friends,

lets imagine i have following state , i get a message ordered
timeStamp1,transactionA,Status_ordered

I want to check if for this transaction if the order was delivered in the next 15 mins or not,, if not then I want to raise an alert.

timeStamp1+10,transactionA,Status_Delivered (then no problem )

but there is no status_delivered for the transactionA is detected in next 15 min then i would like to generate an alert, either in kibana or in Elasticsearch .

please guide

2

You might want to look into EQL. While it's mainly intended for security, I don't see why it can't be applied here as well.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.