Hi, I have created many alert rules in Kibana, however currently I am facing a strange issue, when I create Log Threshold Rule with single condition it is working file and Triggering the alert, but if I add multiple conditions to it, alert is not getting triggered, to validate I have checked log co…

Hi @manzer Welcome to the community First always tell us the version. Open These... and look [Screenshot 2026-01-29 at 8.02.58 PM] So I set mine up with some logs... [Screenshot 2026-01-29 at 8.08.42 PM] And it worked and stephenb-es-integrationAPP 8:05 PM 532 log entries in the last 5 mi…

Hi @stephenb , Thank you for the response ! I had mentioned the version : 8.5.3 :slight_smile: Please find the expanded screenshot below. conditions are meeting, however Alert are not getting trigged [image] [image] Also, as mentioned in my 1st post, it is working for me for other Alert rul…

Can you run the same query in Discover for the same time interval and share the result? Use the query bellow looking for the last 24 hours service.name: "aem-shared-a-publisher-service" and http.response.status_code: 429

Hi @leandrojmp , SS Below [image]

@manzer Sorry I missed the version 8.5 is very old and lots of updates and fixes especially with respect to alerts you should think about getting to 8.19.x in prep to 9.x When you say the alert is not triggered where are you checking/ to validating that? Have you deleted the rule and recreated it…

@stephenb Agree with you point on considering to upgrade the cluster, however I am not sure that I can achieve it now due to other dependencies. I already have many alert rules configured and those are working fine, based on our new requirement I was trying to create this new alert rule, and obser…

[image] manzer: I have already tested KQL and it is Discover (pasted the output in previous post) yes understood [image] stephenb: You could test with elasticsearch query rule with your KQL [image] Create an Elasticsearch query rule | Kibana Guide [8.19] | Elastic …

@stephenb Thanks a lot for the details and your quick responses, much appreciated :saluting_face: , I will give a try to your suggestions !

Kibana Log Threshold Alert Rule Trigger Problem when using multiple conditions

Elastic Observability

manzer (Manzer Ansari) February 1, 2026, 5:54pm 9

@stephenb
Thanks a lot for the details and your quick responses, much appreciated ,

I will give a try to your suggestions !

Topic		Replies	Views
Kibana multiple conditions not working Kibana elastic-stack-alerting	1	437	July 29, 2021
Alerting - OR condition in Log threshold rule type Elastic Observability elastic-stack-alerting	1	585	March 10, 2023
Define Multiple Conditions in an Alert Kibana elastic-stack-alerting	2	783	February 6, 2023
Alerts from Kibana log monitoring Kibana elastic-stack-alerting	2	363	August 9, 2023
Monitor events in an alert Kibana elastic-stack-alerting	1	54	August 14, 2025

Kibana Log Threshold Alert Rule Trigger Problem when using multiple conditions

Related topics