Single Watcher Alert for multiple hosts

Elastic Stack Kibana
1

Hi,

Is it possible to setup a single Watcher alert for something such as HDD space and have the action send the hostname of the server reporting the issue in the alert?

The only drawback I can see if this is possible is that I would have issues with Throttling if a second server was to meet the watcher criteria, I would then never see this.

2

Hi,
Yes , throttling would be an issue, if the throttling kicks in, then it would not matter for which host the condition was true. I was thinking chained input would work here, but the input does not matter here (could also be a search with an aggregation on the hostname) as throttling is just about the condition to be true or false.. and if that could be either host a OR b, then you could miss an alert for a different host because the watch is already throttling.

Thanks
Rashmi

3

Thank you Rashmi, I will look at running a watcher per server then.

4

Awesome, keep us posted.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.