The title said it all.
"actions": {
"email_action": {
"throttle_period_in_millis": 900000,
"email": {
"profile": "standard",
"to": [
"myEmail@SMTP.com"
],
"subject": "{{ctx.payload.hits.total}} Errors have occured in the logs",
"body": {
"text": "{{ctx.payload.hits.total}} Errors have occured in the logs in the last X minute. You can check the latest in the below link",
"html": "Error name or error stack trace: {ctx._source.@timestamp} {{ctx._source.@timestamp}} {{ctx.payload.hits.2._source.@timestamp}} {{ctx.payload.hits.3._source.@timestamp}}"
}
}
}
},
That does not work. Any cue?