Using multiple data views in a single alert definition?

gueguet57
Wed, 26 Nov 2025 12:41:10 +0000
Elastic Observability

Hi everyone,

I’m wondering if it’s possible for an alert to reference multiple data views in its definition.

My use case: I have one data view per environment, and I’d like to avoid duplicating the same alert definition for each environment. Ideally, the alert’s query would run across several data views at once.

Is this currently supported, or is there a recommended workaround?

Thanks!

6 posts - 3 participants