Context group not visible in rule

Dhruv_Naik
Mon, 15 Dec 2025 07:39:08 +0000
Kibana

I’ve set a GROUP BY query which looks as follows under Rules:

When I test the index connector via Dev Tools the context.group stays empty. My document is formatted as follows:

{
  "alert_type": "ERROR_THRESHOLD_BREACH",
  "server": "{{context.group}}",
  "error_count": "{{context.value}}",
  "threshold": 1,
  "time_window": "5m",
  "rule_name": "{{rule.name}}",
  "rule_id": "{{rule.id}}",
  "triggered_at": "{{context.date}}"
}

All fields appear but the context.group. What is the correct approach to fix this problem?

2 posts - 2 participants