# Kibana watcher alert when error log rate exceeds 1 per min for 1 hour

**URL:** https://discuss.elastic.co/t/kibana-watcher-alert-when-error-log-rate-exceeds-1-per-min-for-1-hour/261197
**Category:** Kibana
**Tags:** elastic-stack-alerting
**Created:** [January 15, 2021, 1:17am UTC](https://discuss.elastic.co/t/kibana-watcher-alert-when-error-log-rate-exceeds-1-per-min-for-1-hour/261197 "2021-01-15T01:17:00Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Chenyang\_Liu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chenyang_liu/32/82278_2.png) [@Chenyang\_Liu](https://discuss.elastic.co/u/Chenyang_Liu)
#### Post date: [January 15, 2021, 1:17am UTC](https://discuss.elastic.co/t/kibana-watcher-alert-when-error-log-rate-exceeds-1-per-min-for-1-hour/261197/1 "2021-01-15T01:17:00Z")

</div>

I would like to setup a Kibana watcher to send alert when error log rate is over 1 per minute for one hour.  
So I set a scheduler interval to 1m, then query `log.level: ERROR` to get the error count for 1 min  
But after that, how would I achieve alerting only if it last for 1 hour?  
Thanks for your response

---

<div class="post-metadata">

### Author: ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)
#### Post date: [January 15, 2021, 6:11pm UTC](https://discuss.elastic.co/t/kibana-watcher-alert-when-error-log-rate-exceeds-1-per-min-for-1-hour/261197/2 "2021-01-15T18:11:53Z")

</div>

What version of Kibana are you running?

In 7.10, you can specify `For the last` time range block. Set this to 1 hour.

 ![Screen Shot 2021-01-15 at 11.09.09 AM](https://us1.discourse-cdn.com/elastic/original/3X/c/d/cd0dfbb7868dccb3d56ecf481be0efd766f2b796.png)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 12, 2021, 6:12pm UTC](https://discuss.elastic.co/t/kibana-watcher-alert-when-error-log-rate-exceeds-1-per-min-for-1-hour/261197/3 "2021-02-12T18:12:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.