I want to create a table inside kibana watcher and add the relevant data in it. Urgent

Elastic Stack Kibana
1

I'm trying to create a kibana watcher for alerting purpose. I need help how i can create a table inside kibana watcher and add the relevant fields in it.
Below is my watcher json
{
"trigger": {
"schedule": {
"interval": "1m"
}
},
"input": {
"search": {
"request": {
"search_type": "query_then_fetch",
"indices": [
"mi-services-loader-*",
"logs"
],
"rest_total_hits_as_int": true,
"body": {
"size": 50,
"query": {
"bool": {
"must": [
{
"query_string": {
"query": """Application.Name:("InstnAUMCelsus_Int") AND Context.Properties.message:("Exception occured in InstnAUMCelcus Loader while preparing data for KeyInstn")"""
}
}
],
"filter": [
{
"range": {
"@timestamp": {
"from": "now-1h",
"to": "now"
}
}
}
]
}
}
}
}
}
},
"condition": {
"compare": {
"ctx.payload.hits.total": {
"gte": 1
}
}
},
"actions": {
"send_email": {
"throttle_period_in_millis": 3600000,
"email": {
"profile": "standard",
"to": [
"maheen.ali@spglobal.com"
],
"subject": "Development - AUM: Data Discrepancy| Date {{ctx.trigger.scheduled_time}}|InstnAUMCelsus Loader|Application ID: 938",
"body": {
"text": "Alert Details: {{ctx.payload.hits.total}} hits found."
}
}
}
}
}

and table which i want to create is

Column1 Column2 Column3 Column4 Column5
data data data data data
data data data data data
data data data data data
data data data data data
data data data data data

2

Can someone please reply. It's URGENT

3

Please be patient in waiting for responses to your question and refrain from pinging multiple times asking for a response or opening multiple topics for the same question. This is a community forum, it may take time for someone to reply to your question. For more information please refer to the Community Code of Conduct specifically the section "Be patient". Also, please refrain from pinging folks directly, this is a forum and anyone that participates might be able to assist you.

If you are in need of a service with an SLA that covers response times for questions then you may want to consider talking to us about a subscription.

It's fine to answer on your own thread after 2 or 3 days (not including weekends) if you don't have an answer.

4

Thanks for the response. Can I expect any response on the above question?

5

Hopefully someone who knows will answer

1 Like