How to send notification if filebeat on a machine not sending data for certain time

Elastic Stack Elasticsearch
1

As caption, is it possible to do so?

2

You should be able to do this using Watcher and I think there exists an old example showing how this can be done efficiently through aggregations. I am not sure that example is up to date but it should be a good starting point.

3

let me have a look. Thank you