Split or cut from context_hits iteration in Elasticsearch query rule

Elastic Stack Elasticsearch
1

Hello.

I'm newbie in Elasticsearch monitoring.

I'm trying to get only a few strings or characters from an context_hits iteration like this:

{{#context.hits}}
{{_source.message}}
{{/context.hits}}

I have too many information in message field. I would like to use only a few words or characters from this field to report in slack message action. Is any way to cut, split or some other method to do this?

Regards.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.