Server Down or Restarted Alert Rule

lomar
Mon, 15 Sep 2025 07:00:28 +0000
Elastic Observability

I want to monitor whether my servers are shut down or restarted. To do this, I created a Metricbeat Threshold rule via Observability, but it is not working properly. Even if the condition that triggered the alarm is no longer present, the alarm does not stop.

In most alarms, the Observed value field appears as [NO DATA].

2 posts - 1 participant