Hi, I am setting up alerting off of kibana logs search. Was not able to find documention for my desired use case. Is there a way to match multiple queries under a filter with OR instead of AND? This is *.yml file.
Example:
# A list of elasticsearch filters used for find events
# These filters are joined with AND and nested in a filtered query
# For more info: http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/query-dsl.html
filter:
- query:
query_string:
query: 'query1'
- query:
query_string:
query: 'query2'