# Using kibana alerting with filters

**URL:** https://discuss.elastic.co/t/using-kibana-alerting-with-filters/259956
**Category:** Kibana
**Tags:** elastic-stack-alerting
**Created:** [December 31, 2020, 12:32pm UTC](https://discuss.elastic.co/t/using-kibana-alerting-with-filters/259956 "2020-12-31T12:32:13Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![VAX](https://avatars.discourse-cdn.com/v4/letter/v/d78d45/32.png) [@VAX](https://discuss.elastic.co/u/VAX)
#### Post date: [December 31, 2020, 12:32pm UTC](https://discuss.elastic.co/t/using-kibana-alerting-with-filters/259956/1 "2020-12-31T12:32:13Z")

</div>

hi all,  
im quite new with kibana  
i have kibana filled with messages coming from my equipment.  
i created an inverted filtered of "blacklist" so i will see the only ones i care about.  
now i want to create an alert that will notify any time a new alert is raised and its information to be send via slack connector

1. how can i create an alert that will take into account my filter?  
this is the filter :  
 ![Screen Shot 2020-12-31 at 14.24.52](https://us1.discourse-cdn.com/elastic/original/3X/4/3/43c29a8f548dbbfbb3356a047bc9bb364718f519.png)  
here is an example of a message:  
 ![Screen Shot 2020-12-31 at 14.26.04](https://us1.discourse-cdn.com/elastic/original/3X/1/d/1df0babfa27f66d70ad7deac8e2b56ff3f682d58.png)  
this is the alert i want to do  
 ![Screen Shot 2020-12-31 at 14.29.38](https://us1.discourse-cdn.com/elastic/original/3X/6/9/69ed428d80762d267a2fa9cfe364e21a2f676d16.png)
2. how can i make the alert send information of the message raised, i dont see it in the context options of slack connector.

thanks in advance if anymore infomation is needed i will supply it gladly

---

<div class="post-metadata">

### Author: ![mikecote](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikecote/32/58549_2.png) [@mikecote](https://discuss.elastic.co/u/mikecote)
#### Post date: [January 5, 2021, 2:19pm UTC](https://discuss.elastic.co/t/using-kibana-alerting-with-filters/259956/2 "2021-01-05T14:19:10Z")

</div>

Hi @VAX,

> 1. how can i create an alert that will take into account my filter?

For this one, if you're using log threshold, you should be able to click "+ Add condition" then choose field with a "DOES NOT MATCH" comparator. This should exclude the values you don't want.

> 1. how can i make the alert send information of the message raised, i dont see it in the context options of slack connector.

This is a current limitation of the "Log threshold" alert type. There is a few enhancement requests opened that you can follow ([elastic/kibana#78940](https://github.com/elastic/kibana/issues/78940) and [elastic/kibana#69611](https://github.com/elastic/kibana/issues/69611)).

Soon, we are also going add a new type of alert that can use Elasticsearch DSL and alert on matches. [elastic/kibana#61313](https://github.com/elastic/kibana/issues/61313).

I hope this helps,  
Mike

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 2, 2021, 2:19pm UTC](https://discuss.elastic.co/t/using-kibana-alerting-with-filters/259956/3 "2021-02-02T14:19:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.