Kibana alert on boolean field possible?

Elastic Stack Kibana
1

Hello,

I would like to know if kibana alerts (https://www.elastic.co/guide/en/kibana/current/alert-types.html) can somehow handle boolean fields.

I have an index pattern with a field "error_signal" as boolean and would like to create an kibana alert on it. As far as I read before, I thought the index threshold alert would be the solution, but I can not filter there for

if "error_signal" : true

like I can do it in my usual queries.

Is there a solution to it (with the basic license)?

2

Currently alerts don't yet support filtering, however this is a feature we are working toward. You can follow along with the Github issue if you are interested: https://github.com/elastic/kibana/issues/66046

There are also plans to eventually bring alerts to Discover, which would provide the same type of functionality -- allowing you to create an alert based on your current view of Discover, including filters. The issue to follow for that is https://github.com/elastic/kibana/issues/71099

3

Thanks! I hope we will see the feature soon.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.