Monitor indexes from ELK with monitoring feature enabled

Elastic Stack Elasticsearch
1

Hello

I deployed ELK Monitoring Cluster (ELK with feature of monitoring enabled ) and I have couple of other clusters with metricbeat connecting to elasticsearch on it.

I would like to implement rule that when in index thereis no recent data - it will trigger an alert. Is it some dedicated rule for it ? I checked rules and alerts and didn't find anything related

2

Hello Dominik,

You can do that with the Elasticsearch Query rule:

image
image618×928 42.7 KB

This example will create an alert if less than thousand documents are found for the last 5 minutes.

Best regards
Wolfram

3

Hello
Thanks for reply but I cannot see such rule.
After implementing monitoring all I did was choose "install default rules"
Are there some extended rules for monitoring which I can install ?

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.