Kibana Alerts - Log threshold keyword

Hi All,

Trying to configure a 'Log Threshold Alert' in Kibana but running into a problem when doing a conditional statement to a field

In the following image, I am trying to alert when message_code.keyword equal XXXX.
In my documents, this field is 4 digits long and usually contains a leading 0. For example some of the fields are:

  • 0200
  • 0210
  • 0220
  • 0230

When I try and set the comparison value to a value that has a leading 0, it strips the 0 out.

  • 0200 -> 200
  • 0210 -> 210

Is this a bug or is it something that I am doing wrong?


That sounds like a bug. Mind creating an issue at Please include your kibana version and steps taken to create the alert

Done. For any future references:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.