Send one email for each hits in last 5 mins

I manage to send all the payload hits in a single mail. But i need one payload to have one email.

Any option like array thru the payload and create email actions based on the payload hits


Unfortunately this is currently not possible with watcher, as you can only send a single email alert. What you could do outside of watcher, send those found documents over to logstash, and then send an email for each of the events in there.

Hope this helps!


I am new to the product. My current setup uses logstash to look for events from specific port and load it to the elastic.

Can it be achieved with out duplicating my events by using a different port for email ?. Do you have any reference link or sample for me to deploy it.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.