I'm looking to create a filesystem monitor based off of metricbeat and this sample watch.
I want to perform a webhook action to create tickets in our ticketing system. However, if multiple servers/filesystems return over the threshold, I want to create separate tickets for each. So essentially loop through an action for each returned document. Is there a way to accomplish this, or a good strategy to perform this task?