Query for a new entry on a field

Elastic Stack Elasticsearch
1

Hi
I have an index which contains a field network_device_ID
image

I want to alert whenever there a new entry coming into the Index. what is the best way to achieve this?

Cheers, Ginu

2

Have a look at the free Elast Alert or the premium feature of kibana.

3

Hi Defalt
thanks for the suggestion. but my question was more about how to cache the value which is already existing and only to alert the new Values coming in using Watchers.

in the example:
image

when there is a new network_device_id shows up. I want to alert.

Regards, Ginu

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.