Hi, as tittle says is it possible to gather document in kibana rule that was hit?
My usecase is like this that I am using inventory treshold rule for kubernetes pods to check memory usage treshold. I am ussing index connector and write it futher to index. I gathered full context object and it is missing pod name.
Is is possible to reach source document containing pod name?
Somewhere on internet I found syntax: {{.source.kubernetes.pod.name}} however in my case is null.
Just to confirm in document that is analyzed there is kubernetes.pod.name properly populated but I can't find any way to get it in rule writting to index.