# How to setup an alert which checks for a keyword

**URL:** <https://discuss.elastic.co/t/how-to-setup-an-alert-which-checks-for-a-keyword/237325>\
**Category:** Kibana\
**Created:** [June 16, 2020, 2:42pm UTC](https://discuss.elastic.co/t/how-to-setup-an-alert-which-checks-for-a-keyword/237325 "2020-06-16T14:42:27Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vikas\_Rathore](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_rathore/32/70471_2.png) [@Vikas\_Rathore](https://discuss.elastic.co/u/Vikas_Rathore)\
**Post date:** [June 16, 2020, 2:42pm UTC](https://discuss.elastic.co/t/how-to-setup-an-alert-which-checks-for-a-keyword/237325/1 "2020-06-16T14:42:27Z")

</div>

I am trying to add an alert on Kibana. The destination is created but I am not able to understand how to create a monitor to check for this key "setException MongoDB Generic Error" and when the count is greater than 1. trigger alert.

I am selecting this options:

```auto
How do you want to define the monitor?: define using a visual graph
index? *
Time field? @timestamp

```

but I am not getting any field where I can enter the keyword.

Basically I am looking to set a monitor which checks and trigger alert whenever new logs comes which contains **setException MongoDB Generic Error** in the message

```auto
**Kibana version:** 6.4.2
filebeat: 6.3.2

```

---

<div class="post-metadata">

**Author:** ![mikecote](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikecote/32/58549_2.png) [@mikecote](https://discuss.elastic.co/u/mikecote)\
**Post date:** [June 18, 2020, 6:49pm UTC](https://discuss.elastic.co/t/how-to-setup-an-alert-which-checks-for-a-keyword/237325/2 "2020-06-18T18:49:12Z")

</div>

Hi @Vikas_Rathore,

I believe this issue doesn’t relate to Kibana Alerting as Kibana Alerting only got released in 7.7.

What you are looking for should be doable once we add an ES DSL alert type ([#61313](https://github.com/elastic/kibana/issues/61313)) to Kibana Alerting.

Based on the terminology used to describe your problem, I believe that you're using Open Distro's alerts. I'd suggest opening up an issue in the open distro repo: [https://github.com/opendistro-for-elasticsearch/alerting-kibana-plugin](https://github.com/opendistro-for-elasticsearch/alerting-kibana-plugin)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 16, 2020, 6:53pm UTC](https://discuss.elastic.co/t/how-to-setup-an-alert-which-checks-for-a-keyword/237325/3 "2020-07-16T18:53:50Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.