# Send one email for each hits in last 5 mins

**URL:** <https://discuss.elastic.co/t/send-one-email-for-each-hits-in-last-5-mins/154994>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-alerting\
**Created:** [November 1, 2018, 10:42am UTC](https://discuss.elastic.co/t/send-one-email-for-each-hits-in-last-5-mins/154994 "2018-11-01T10:42:43Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Lakshman](https://avatars.discourse-cdn.com/v4/letter/l/a4c791/32.png) [@Lakshman](https://discuss.elastic.co/u/Lakshman)\
**Post date:** [November 1, 2018, 10:42am UTC](https://discuss.elastic.co/t/send-one-email-for-each-hits-in-last-5-mins/154994/1 "2018-11-01T10:42:43Z")

</div>

I manage to send all the payload hits in a single mail. But i need one payload to have one email.

Any option like array thru the payload and create email actions based on the payload hits

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [November 2, 2018, 9:07am UTC](https://discuss.elastic.co/t/send-one-email-for-each-hits-in-last-5-mins/154994/2 "2018-11-02T09:07:11Z")

</div>

Hey,

Unfortunately this is currently not possible with watcher, as you can only send a single email alert. What you could do outside of watcher, send those found documents over to logstash, and then send an email for each of the events in there.

Hope this helps!

--Alex

---

<div class="post-metadata">

**Author:** ![Lakshman](https://avatars.discourse-cdn.com/v4/letter/l/a4c791/32.png) [@Lakshman](https://discuss.elastic.co/u/Lakshman)\
**Post date:** [November 9, 2018, 9:45am UTC](https://discuss.elastic.co/t/send-one-email-for-each-hits-in-last-5-mins/154994/3 "2018-11-09T09:45:59Z")

</div>

I am new to the product. My current setup uses logstash to look for events from specific port and load it to the elastic.

Can it be achieved with out duplicating my events by using a different port for email ?. Do you have any reference link or sample for me to deploy it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 7, 2018, 9:46am UTC](https://discuss.elastic.co/t/send-one-email-for-each-hits-in-last-5-mins/154994/4 "2018-12-07T09:46:08Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.