Elastalert for logs ingested to ElasticSearch cluster per day that is size? #1496
-
Is there any way we can send alerts through mail how much logs are ingested to Elastic search ? |
Beta Was this translation helpful? Give feedback.
Answered by
jertel
Jul 15, 2024
Replies: 1 comment
-
Consider an |
Beta Was this translation helpful? Give feedback.
0 replies
Answer selected by
jertel
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Consider an
any
type rule with no filter that runs once a day and hasuse_count_query: true
. You might then have access tonum_hits
as a var in your alert message. I haven't tried this, so you'll need to read the docs and play with it to see what happens.