Monitor indexes from ELK with monitoring feature enabled


I deployed ELK Monitoring Cluster (ELK with feature of monitoring enabled ) and I have couple of other clusters with metricbeat connecting to elasticsearch on it.

I would like to implement rule that when in index thereis no recent data - it will trigger an alert. Is it some dedicated rule for it ? I checked rules and alerts and didn't find anything related

Hello Dominik,

You can do that with the Elasticsearch Query rule:

This example will create an alert if less than thousand documents are found for the last 5 minutes.

Best regards

Thanks for reply but I cannot see such rule.
After implementing monitoring all I did was choose "install default rules"
Are there some extended rules for monitoring which I can install ?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.