I have requirement where I need to match multiple patterns from the same the index and raise a alert for each pattern.
For example Index "test*" contains below data for field text
text: cluster is unavailable or misconfigured
text: cannot process template resource
Should I write separate watcher to handle the above two patterns or can I accommodate multiple search in single watcher?