# Index changes notifications (document creation, update, deletion within the index / doc and more)

**URL:** <https://discuss.elastic.co/t/index-changes-notifications-document-creation-update-deletion-within-the-index-doc-and-more/324069>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-alerting\
**Created:** [January 26, 2023, 7:29pm UTC](https://discuss.elastic.co/t/index-changes-notifications-document-creation-update-deletion-within-the-index-doc-and-more/324069 "2023-01-26T19:29:00Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![RAVI\_GOPALANI](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ravi_gopalani/32/83691_2.png) [@RAVI\_GOPALANI](https://discuss.elastic.co/u/RAVI_GOPALANI)\
**Post date:** [January 26, 2023, 7:29pm UTC](https://discuss.elastic.co/t/index-changes-notifications-document-creation-update-deletion-within-the-index-doc-and-more/324069/1 "2023-01-26T19:29:00Z")

</div>

Hi,  
I am looking for alerting / notification for document creation, update, deletion within the index / doc. Does there any api available within the Elasticsearch / logstash for alerting the changes done at Index / Document level while performing the CRUD operations within the index / \_doc.

Waiting for the reply.

Thanks,  
Ravi

---

<div class="post-metadata">

**Author:** ![Ayush\_Mathur](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ayush_mathur/32/77134_2.png) [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\
**Post date:** [January 27, 2023, 10:11am UTC](https://discuss.elastic.co/t/index-changes-notifications-document-creation-update-deletion-within-the-index-doc-and-more/324069/2 "2023-01-27T10:11:09Z")

</div>

Hi @RAVI_GOPALANI , There is no native ES functionality to cover your request. However, I would suggest to maintain `version` of the document that can then be used in watchers for every document creation/ update. This can be done using scripts either in ingest pipeline or `update_by_query`.

For delete however, it would be beneficial to use some sort of binary field like `isDelete` which be default would be false, set during ingestion and when document is deleted via API call, it's set to true.

However, in both cases, please note if a user has access to perform CRUD directly using DevConsole/ cURL/ etc., then your scripts won't be invoked implicitly.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 24, 2023, 10:11am UTC](https://discuss.elastic.co/t/index-changes-notifications-document-creation-update-deletion-within-the-index-doc-and-more/324069/3 "2023-02-24T10:11:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.