# Optimize / combine number of watcher

**URL:** <https://discuss.elastic.co/t/optimize-combine-number-of-watcher/302670>\
**Category:** Kibana\
**Tags:** elastic-stack-alerting\
**Created:** [April 19, 2022, 6:49am UTC](https://discuss.elastic.co/t/optimize-combine-number-of-watcher/302670 "2022-04-19T06:49:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mangeshmj1992](https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/32.png) [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Post date:** [April 19, 2022, 6:49am UTC](https://discuss.elastic.co/t/optimize-combine-number-of-watcher/302670/1 "2022-04-19T06:49:24Z")

</div>

Hello all,  
We have created lots of alerts in our cluster and we are unbale to manage those alerts.

Requirement: We need to 2 or more than 2 watcher in one watch.  
Like: for index Metrickbeat-\* we have 3 alerts for if:

RAM is more than 60% ,  
CPU is more than 80 %,  
Disk usage more than 90% these 3 alerts are on same index,

Can any one help me to combine these 3 alerts in one watch.

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [April 20, 2022, 4:22pm UTC](https://discuss.elastic.co/t/optimize-combine-number-of-watcher/302670/2 "2022-04-20T16:22:34Z")

</div>

If you need an alert for that as an OR, I suggest you write it as an [Elasticsearch query | Kibana Guide [8.1] | Elastic](https://www.elastic.co/guide/en/kibana/current/rule-type-es-query.html) type rule. This way you can do a boolean query that can combine all 3 of those.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 18, 2022, 4:23pm UTC](https://discuss.elastic.co/t/optimize-combine-number-of-watcher/302670/3 "2022-05-18T16:23:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
