I would like to create a Watcher Alert using Watcher JSON and trigger email.
Could you help me create a Watcher JSON that is equivalent to the below formula:
Hi, I am new to ELK.
I am going through the links you have provided.
I have a doubt here.
Will I be able to create a Watcher using bucket script aggregation?
Yes, a Watch can contain any valid Elasticsearch DSL query/aggregation. Here's an example of a watch that looks at weblogs and computes the ratio of status codes in web logs. Not your exact use case, but pretty close!
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.