I do not believe that the source documents are available using the threshold alert Watch that it looks like you are creating, but you should be able to create a custom watch for this. Here is the documentation for accessing search results directly using a custom watch: Watcher search input | Elasticsearch Guide [7.15] | Elastic. Please let me know if you are able to use this.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.