Watcher for missing string for last 4 hours

Hi Guys, In our current project we are having a sync happening every 4 hours which will generate some logs. so, i need to create a watcher using one string "Updated final last sync" where it should throw an alert to our slack channel if the string not found in last 4 hours. can anyone help me with the kibana advanced watcher for the above query...???

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.