Kibana Log Threshold Alert Rule Trigger Problem when using multiple conditions

manzer
Thu, 29 Jan 2026 13:59:17 +0000
Elastic Observability

Hi,

I have created many alert rules in Kibana, however currently I am facing a strange issue, when I create Log Threshold Rule with single condition it is working file and Triggering the alert, but if I add multiple conditions to it, alert is not getting triggered, to validate I have checked log count in Discover section with the same condition and time range/window and it is showing the documents

KQL : service.name : "aem-shared-a-publisher-service" AND http.response.status_code : 429

service.name field type is keyword

http.response.status_code field type is long

Alert Rule :

Kibana Version : 8.5.3

9 posts - 3 participants