# Packetbeat Alerts **URL:** \ **Category:** SIEM\ **Created:** [April 12, 2023, 1:32pm UTC](https://discuss.elastic.co/t/packetbeat-alerts/329841 "2023-04-12T13:32:51Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Joel\_Goncalves](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joel_goncalves/32/118191_2.png) [@Joel\_Goncalves](https://discuss.elastic.co/u/Joel_Goncalves)\ **Post date:** [April 12, 2023, 1:32pm UTC](https://discuss.elastic.co/t/packetbeat-alerts/329841/1 "2023-04-12T13:32:51Z")
I have elasticsearch, kibana and packetbeat running and I want to get alerts whenever there is abnormal activity with packetbeat information. How do I do it? My elasticsearch, kibana and packetbeat are running on-premesis. ---
**Author:** ![spong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spong/32/54343_2.png) [@spong](https://discuss.elastic.co/u/spong)\ **Post date:** [April 14, 2023, 4:27pm UTC](https://discuss.elastic.co/t/packetbeat-alerts/329841/2 "2023-04-14T16:27:46Z")
Hey there Joel! 👋 So what exactly do you mean by `abnormal behavior` with regards to packetbeat information? Are you just looking for some sort of health-check rules, like if ingest stops or reaches a certain throughput? If that's the case, you can use some of the [Stack Rules](https://www.elastic.co/guide/en/kibana/8.7/rule-types.html) to achieve this: ![Rules_-_Elastic](https://us1.discourse-cdn.com/elastic/original/3X/7/f/7f9c839409a5755b45a04a0bb292370cd5ada3d0.jpeg) Let me know if that's not the case and I'd be happy to guide you further 🙂 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 12, 2023, 4:28pm UTC](https://discuss.elastic.co/t/packetbeat-alerts/329841/3 "2023-05-12T16:28:18Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.