I have a Kibana monitor setup with a trigger and actions. In the actions email message I can email the alert query results for 1 document with these ctx parameters:
- Hostname: {{ctx.results.0.hits.hits.0._source.host.name}}
- Log file: {{ctx.results.0.hits.hits.0._source.log.file.path}}
- Log message:
{{ctx.results.0.hits.hits.0._source.message}}
If there are multiple documents returned from the trigger query results is there a way to include all documents results in the email message?
TIA!