Hi there, Im trying to configure what seems to be a really easy watcher but can't get it to work like i want it to. I'm trying to alert if a fail login occurs on one of our Windows Server or a Linux server. Here's my watcher: PUT _xpack/watcher/watch/Security_CheckFailLoginWindows { "trigger": { …

New to ES - Simple watcher does not work like i want

system (system) Closed July 13, 2017, 3:51pm 4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Watcher alerts not triggered Elasticsearch elastic-stack-alerting	6	1240	July 31, 2018
Watcher does not get triggered properly Elasticsearch elastic-stack-alerting	1	328	July 8, 2021
Watcher Query with filter Elasticsearch elastic-stack-alerting	3	644	October 18, 2022
Watcher Assistance Elasticsearch	1	360	March 7, 2020
What should i do to trigger a watch only when condition matches to a certain requirement Elasticsearch elastic-stack-alerting	7	644	June 6, 2018