Hi, I want to create watcher and the condition if there is same at least 10 messages in the field X for 10 minutes i need an alert, I couldn't find any documentary for this sample, should it been done with script? Thanks.

[image] Ayush_Mathur: terms aggregation on fieldX with min_doc_count=10 This is what you need with range filter for timelines. What you are doing currently is a DSL query, please refer here: Terms aggregation | Elasticsearch Guide [8.11] | Elastic

Kibana watcher help

Elastic Stack Kibana

Topic		Replies	Views
Create WATCHER with dynamic search value Kibana	2	455	May 13, 2020
Watcher basics Looping into the bucket and processing its values Elasticsearch elastic-stack-monitoring , elastic-stack-alerting	1	1769	June 30, 2020
Creating watcher script if particular value ina field occurs more than five times in five minutes interval of time Elasticsearch elastic-stack-alerting	0	330	December 22, 2020
Create Kibana Watcher alerts for certain conditions Kibana	3	509	April 3, 2020
Watcher, Creating a kibana watcher to check an integer[0-9] value appears in logs in a give period of time Kibana	5	769	November 3, 2020

Kibana watcher help

Related topics