Send _doc field values in email via watcher

I am using ELK stack on ElasticCloud via AWS. I am sending emails to client using Watcher, alert is generated when fuel level goes below certain threshold. I want to send siteName in email as I am using index like site-* which is like [site-siteA, site-siteB, site-siteC, ...]. How come i am able to achieve this I saw ctx but wasn't able to do so.

sorry, but I do not properly understand the requirement? Where is siteName coming from? From the index name or from the content of a document?


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.