I would like to create an alert that follows:
"message: some search string"
When I create the alert and save it. I receive the following error
"Bulk Indexing of signals failed: object mapping for [source] tried to parse field [source] as object, but found a concrete value,object mapping for [host]"