When setting up an alert and defining by using an extraction query, how do I make the response come out as a rounded value? What is the general syntax and where do I specify this? Example:
{
"aggs": {
"2": {
"avg": {
"field": "XXX"
}
}
},
"size": 0,
"stored_fields": [
"*"
],
"script_fields": {},
"docvalue_fields": [
{
"field": "@timestamp",
"format": "date_time"
},
{
"field": "timestamp",
"format": "date_time"
}
],
"_source": {
"excludes": []
},
"query": {
"bool": {
"must": [],
"filter": [
{
"match_all": {}
},
{
"range": {
"@timestamp": {
"gte": "2022-09-08T10:41:02.738Z",
"lte": "2022-09-08T10:56:02.738Z",
"format": "strict_date_optional_time"
}
}
}
],
"should": [],
"must_not": []
}
}
}