Have configured a Metric Threshold Alert using a field within the results called "Provider-City" in the Group Alerts By. In the message body we have a key/value pair "Provider-City": "{{context.group}}" which is working. We want to add more fields but we want to call to the results but not the context.group. There are other fields we want to pull as well, how do we do that?
Hi @TXBigDawg1836! Unfortunately, the metric threshold alert does not provide the ability to access the underlying source document. If you are able to achieve the same alert type using a custom query and the ES Query rule type, you would be able to access the results using {{context.hits}}. Would that work for your use case?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.