Hi everyone, My condition is currently returning "null", however I know there are documents. Can you please help me in figuring out why it's returning "null"? // My watcher code thus far: https://gist.github.com/nhtrn/d552a42a767826a4ab072fe5a32ea4a5 conditionHelp { "query": { "bo…

Yes, I just did that and got the answer Thank you so much @spinscale Really appreciate your help on this one :slight_smile: Answer for future readers: "ctx.payload.aggregations.<first_agg>.buckets.0.<second_agg>.buckets.0.<field>" // Example: "ctx.payload.aggregations.managedobjectref.buckets.…

Discuss the Elastic Stack

Watcher Condition Returning "Null"

Elastic Stack Elasticsearch

spinscale (Alexander Reelsen) August 19, 2019, 11:08am 9

the you need use a script condition instead of the compare one, which allows you to walk through all the buckets.

Topic		Replies	Views
Watcher returns null values Elasticsearch elastic-stack-alerting	3	1125	February 12, 2020
Watcher Aggregation returning null Elasticsearch painless	2	593	November 3, 2022
Watcher condition with aggregation Kibana painless	7	5812	June 3, 2020
No alert form array results Elasticsearch elastic-stack-alerting	14	3052	July 6, 2017
Watcher - need some help Elasticsearch	1	816	July 25, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Watcher Condition Returning "Null"

Related topics