# Notification/Alert for error labelled logs

**URL:** <https://discuss.elastic.co/t/notification-alert-for-error-labelled-logs/207268>\
**Category:** Kibana\
**Tags:** elastic-stack-monitoring, elastic-stack-alerting\
**Created:** [November 11, 2019, 4:23am UTC](https://discuss.elastic.co/t/notification-alert-for-error-labelled-logs/207268 "2019-11-11T04:23:53Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jegan\_Mariappan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jegan_mariappan/32/57446_2.png) [@Jegan\_Mariappan](https://discuss.elastic.co/u/Jegan_Mariappan)\
**Post date:** [November 11, 2019, 4:23am UTC](https://discuss.elastic.co/t/notification-alert-for-error-labelled-logs/207268/1 "2019-11-11T04:23:54Z")

</div>

Is there any option in Elastic cloud to send alerts or notifications to the customer via email in case of any specific occurrence of log levels from the logs collected by logstash?

---

<div class="post-metadata">

**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\
**Post date:** [November 11, 2019, 6:07am UTC](https://discuss.elastic.co/t/notification-alert-for-error-labelled-logs/207268/2 "2019-11-11T06:07:39Z")

</div>

> [@Jegan\_Mariappan](#):
>
> end alerts or notifications to the customer via email in case of any specific occurrence of log levels from the l

On prem or on cloud, you can always use our watcher product which can generate alerts on specifying a specific condition.  
Hey,

have you seen this link in the elastic cloud docs? [https://www.elastic.co/guide/en/cloud/saas-release/ec-watcher.html](https://www.elastic.co/guide/en/cloud/saas-release/ec-watcher.html)

hope it helps  
Rashmi

---

<div class="post-metadata">

**Author:** ![Jegan\_Mariappan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jegan_mariappan/32/57446_2.png) [@Jegan\_Mariappan](https://discuss.elastic.co/u/Jegan_Mariappan)\
**Post date:** [November 11, 2019, 9:07am UTC](https://discuss.elastic.co/t/notification-alert-for-error-labelled-logs/207268/3 "2019-11-11T09:07:00Z")

</div>

Thanks for your response.

I have only seen giving the mathematical based conditions on watcher. Can I generate alerts based on string conditions in watcher?

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [November 11, 2019, 10:13am UTC](https://discuss.elastic.co/t/notification-alert-for-error-labelled-logs/207268/4 "2019-11-11T10:13:12Z")

</div>

Hey,

you can execute a search for a certain log level in combination with a customer and a time range (like the last 5 minutes), and then trigger an alert if any documents had been found?

--Alex

---

<div class="post-metadata">

**Author:** ![Jegan\_Mariappan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jegan_mariappan/32/57446_2.png) [@Jegan\_Mariappan](https://discuss.elastic.co/u/Jegan_Mariappan)\
**Post date:** [November 11, 2019, 10:56am UTC](https://discuss.elastic.co/t/notification-alert-for-error-labelled-logs/207268/5 "2019-11-11T10:56:20Z")

</div>

I want live alerts so that I can get notifications whenever logs occurs at the that specific log level. Is there any option for that?

---

<div class="post-metadata">

**Author:** ![Jegan\_Mariappan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jegan_mariappan/32/57446_2.png) [@Jegan\_Mariappan](https://discuss.elastic.co/u/Jegan_Mariappan)\
**Post date:** [November 12, 2019, 4:10am UTC](https://discuss.elastic.co/t/notification-alert-for-error-labelled-logs/207268/6 "2019-11-12T04:10:42Z")

</div>

@rashmi @spinscale Can you please??

---

<div class="post-metadata">

**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\
**Post date:** [November 12, 2019, 4:55pm UTC](https://discuss.elastic.co/t/notification-alert-for-error-labelled-logs/207268/7 "2019-11-12T16:55:01Z")

</div>

> [@spinscale](#):
>
> alert if any documents had been found?
> 
> --Alex

linking you to a similar discuss post: hope it helps: [Compare condition for checking strings in watcher is not Working? - #2 by spinscale](https://discuss.elastic.co/t/compare-condition-for-checking-strings-in-watcher-is-not-working/126882/2)

thanks  
Rashmi

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 10, 2019, 4:55pm UTC](https://discuss.elastic.co/t/notification-alert-for-error-labelled-logs/207268/8 "2019-12-10T16:55:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
