I'm using Kibana 7.9.1 and recently I've started to explore Monitoring and Alerting, I have few questions:
I have a monitor with an active trigger, the alert has been triggered for some reason only once.
Besides, I'm not sure where can I find the log or reason that made the trigger, I only see the trigger with no details(For example, I don't see the IP that made the trigger).
Another issue, when I'm creating a monitor using "Define using extraction query" I can only use the
ctx.results.hits.total.value > 0 I don't know how to do the same but with buckets values.