How to send Query output as an Email

Hi Everyone,

I'm stuck at an simple query.

Thing is that we need to send an alert email to administrator if there are more than 3 exception came into process. Exceptions are covered under TransactionStatus key in json.

With below query, I'm able to get the exceptions detail but not aware of that how to send email this output.

GET /_search
"_source": {
"includes": [
"query": {
"bool": {
"must": [
{ "match": { "logF_TransactionStatus": "ApplicationException" }},
{ "match": { "processName": "XXXXXXXXXX" }}],
"must_not": [
{ "match": { "level": "Error" }},
{ "match": { "level": "Warn" }}
"filter": {
"range": { "timeStamp": { "gte": "now-1h" }}

You need to create a watch in order to do this. The next step would be to get accustomized with alerting and how to use it, and then send email with it

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.