# Alerting **URL:** https://forum.opensearch.org/c/plugins/alerting/7.md [Latest](https://forum.opensearch.org/latest.md) · [Categories](https://forum.opensearch.org/categories.md) · [Tags](https://forum.opensearch.org/tags.md) --- ## [About the Alerting category](https://forum.opensearch.org/t/about-the-alerting-category/17)
**Author:** [@carlmead](https://forum.opensearch.org/u/carlmead)\ **Replies:** 0\ **Last updated:** [March 1, 2019, 4:10am UTC](https://forum.opensearch.org/t/about-the-alerting-category/17 "2019-03-01T04:10:38Z")
Discuss using Alerting to configure monitors, triggers and notifications to send automatic alerts. Alerting documentation: Alerting - OpenSearch documentation --- ## [Help configuring alerting monitor](https://forum.opensearch.org/t/help-configuring-alerting-monitor/28343)
**Author:** [@Pan-Vad](https://forum.opensearch.org/u/Pan-Vad)\ **Replies:** 2\ **Last updated:** [October 16, 2026, 12:53am UTC](https://forum.opensearch.org/t/help-configuring-alerting-monitor/28343 "2026-10-16T00:53:59Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): OpenSearch 3.8/OSD 3.8/SLES Describe the issue: Please tell me which type of OpenSearch Alerting monitor to choose: “Per query monitor”, “Per bucket monitor… --- ## [Help configuring an OpenSearch 3.5 alerting monitor with three triggers](https://forum.opensearch.org/t/help-configuring-an-opensearch-3-5-alerting-monitor-with-three-triggers/28261)
**Author:** [@Pan-Vad](https://forum.opensearch.org/u/Pan-Vad)\ **Replies:** 3\ **Last updated:** [September 4, 2026, 4:06pm UTC](https://forum.opensearch.org/t/help-configuring-an-opensearch-3-5-alerting-monitor-with-three-triggers/28261 "2026-09-04T16:06:28Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): OpenSearch 3.5/OSD 3.5/Win10/Google Chrome Describe the issue: I am using OpenSearch 3.5 and need assistance configuring an Alerting Monitor. I need to cre… --- ## [How to get Alerting permissions to create monitors on an internal Atlas OpenSearch cluster?](https://forum.opensearch.org/t/how-to-get-alerting-permissions-to-create-monitors-on-an-internal-atlas-opensearch-cluster/28180)
**Author:** [@cecflore](https://forum.opensearch.org/u/cecflore)\ **Replies:** 3\ **Last updated:** [July 10, 2026, 11:03am UTC](https://forum.opensearch.org/t/how-to-get-alerting-permissions-to-create-monitors-on-an-internal-atlas-opensearch-cluster/28180 "2026-07-10T11:03:14Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): OpenSearch Dashboards Describe the issue: I’m trying to create an Alert Monitor on our internal Atlas OpenSearch cluster to send pick short notifications to … --- ## [Issue with Sending Test Messages in OpenSearch Alerting](https://forum.opensearch.org/t/issue-with-sending-test-messages-in-opensearch-alerting/28170)
**Author:** [@Douaa\_MIKOU](https://forum.opensearch.org/u/Douaa_MIKOU)\ **Replies:** 1\ **Last updated:** [June 30, 2026, 12:04pm UTC](https://forum.opensearch.org/t/issue-with-sending-test-messages-in-opensearch-alerting/28170 "2026-06-30T12:04:26Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): Describe the issue: I’m encountering an issue while trying to send a test message from OpenSearch to a Microsoft Teams channel. I have set up an alerting not… --- ## [Channels Visibility across all tenants](https://forum.opensearch.org/t/channels-visibility-across-all-tenants/28077)
**Author:** [@muraliv](https://forum.opensearch.org/u/muraliv)\ **Replies:** 5\ **Last updated:** [May 19, 2026, 11:40am UTC](https://forum.opensearch.org/t/channels-visibility-across-all-tenants/28077 "2026-05-19T11:40:11Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): 3.6 Describe the issue: We have added this setting in the opensearch.yml file to filter out the alerts or monitors created by tenant. Now we are running in… --- ## [Index Patterns - for Monitoring](https://forum.opensearch.org/t/index-patterns-for-monitoring/28037)
**Author:** [@muraliv](https://forum.opensearch.org/u/muraliv)\ **Replies:** 2\ **Last updated:** [May 1, 2026, 8:59pm UTC](https://forum.opensearch.org/t/index-patterns-for-monitoring/28037 "2026-05-01T20:59:18Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): 3.6 - Google Chrome Describe the issue: Does the index pattern (including data stream) automatically populate or does the user need to specify the pattern m… --- ## [Monitor deletions and channel updates/deletions still do not appear in the log](https://forum.opensearch.org/t/monitor-deletions-and-channel-updates-deletions-still-do-not-appear-in-the-log/27299)
**Author:** [@shubham2](https://forum.opensearch.org/u/shubham2)\ **Replies:** 1\ **Last updated:** [December 18, 2025, 7:41pm UTC](https://forum.opensearch.org/t/monitor-deletions-and-channel-updates-deletions-still-do-not-appear-in-the-log/27299 "2025-12-18T19:41:02Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): OpenSearch and OpenSearch Dashboard version is 2.18.0 Describe the issue:I’m using the OpenSearch Dashboards UI to create, update, and delete monitors via Al… --- ## [Zabbix and Opensearch integration](https://forum.opensearch.org/t/zabbix-and-opensearch-integration/27582)
**Author:** [@vnovotny98](https://forum.opensearch.org/u/vnovotny98)\ **Replies:** 3\ **Last updated:** [December 10, 2025, 2:17pm UTC](https://forum.opensearch.org/t/zabbix-and-opensearch-integration/27582 "2025-12-10T14:17:06Z")
Hi all, I’m trying to set up alerting for some monitors I have, and I want to integrate this with Zabbix. Because we have some colleagues that can access only Zabbix and we try to have everything alerted by Zabbix. Spec… --- ## [Bucket-level monitor triggers only on dry run, no actions fired on schedule](https://forum.opensearch.org/t/bucket-level-monitor-triggers-only-on-dry-run-no-actions-fired-on-schedule/27569)
**Author:** [@gaizkaeu](https://forum.opensearch.org/u/gaizkaeu)\ **Replies:** 1\ **Last updated:** [December 1, 2025, 12:04pm UTC](https://forum.opensearch.org/t/bucket-level-monitor-triggers-only-on-dry-run-no-actions-fired-on-schedule/27569 "2025-12-01T12:04:29Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): Opensearch 2.19 Describe the issue: I have a bucket-level monitor in OpenSearch. When I run a dry run, the monitor triggers correctly. However, on schedule… --- ## [Index patterns are not supported in doc level monitors](https://forum.opensearch.org/t/index-patterns-are-not-supported-in-doc-level-monitors/27506)
**Author:** [@gstorme](https://forum.opensearch.org/u/gstorme)\ **Replies:** 3\ **Last updated:** [November 30, 2025, 12:31pm UTC](https://forum.opensearch.org/t/index-patterns-are-not-supported-in-doc-level-monitors/27506 "2025-11-30T12:31:28Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser) Opensearch 3.3.0 Describe the issue: When creating a “per document monitor”, it’s not possible to specify a data stream or index that contains a dot in its … --- ## [Do OpenSearch webhook alerts automatically retry if the destination service is down?](https://forum.opensearch.org/t/do-opensearch-webhook-alerts-automatically-retry-if-the-destination-service-is-down/27351)
**Author:** [@abinabu](https://forum.opensearch.org/u/abinabu)\ **Replies:** 2\ **Last updated:** [October 28, 2025, 8:30am UTC](https://forum.opensearch.org/t/do-opensearch-webhook-alerts-automatically-retry-if-the-destination-service-is-down/27351 "2025-10-28T08:30:05Z")
Versions (latest): Describe the issue: I’m using OpenSearch Alerting with webhook destinations to send alerts to an external service would like to understand how OpenSearch alerting handles delivery failures: If the w… --- ## [Where are monitor definitions stored?](https://forum.opensearch.org/t/where-are-monitor-definitions-stored/27292)
**Author:** [@reshippie](https://forum.opensearch.org/u/reshippie)\ **Replies:** 2\ **Last updated:** [October 15, 2025, 6:18pm UTC](https://forum.opensearch.org/t/where-are-monitor-definitions-stored/27292 "2025-10-15T18:18:27Z")
Versions 2.19.2 Describe the issue: I’m about to upgrade from 2.19.2 to 3.2.0 and I want to make sure to backup the monitor definitions that we have. I see that all of the notifications settings are in .opensearch-not… --- ## [Alerting - group by not showing on alerts summary page](https://forum.opensearch.org/t/alerting-group-by-not-showing-on-alerts-summary-page/26509)
**Author:** [@coredump17](https://forum.opensearch.org/u/coredump17)\ **Replies:** 4\ **Last updated:** [October 1, 2025, 2:00pm UTC](https://forum.opensearch.org/t/alerting-group-by-not-showing-on-alerts-summary-page/26509 "2025-10-01T14:00:01Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): 2.19.2 Describe the issue: When using ‘group by’ in an alerting rule, this is correct on the preview but ‘-’ in the alert summary Relevant Logs or Screensho… --- ## [Alerts and Aggregation name](https://forum.opensearch.org/t/alerts-and-aggregation-name/7762)
**Author:** [@szultan](https://forum.opensearch.org/u/szultan)\ **Replies:** 19\ **Last updated:** [August 24, 2025, 1:44pm UTC](https://forum.opensearch.org/t/alerts-and-aggregation-name/7762 "2025-08-24T13:44:22Z")
Hi All! I have created a few new alerts and using metricbeat as a source. I used the following parameters: Monitor type Per bucket monitor Schedule Every 3 minutes I used the host.id or the host.name as a group by… --- ## [Is nested querying supported for per-document monitor?](https://forum.opensearch.org/t/is-nested-querying-supported-for-per-document-monitor/26460)
**Author:** [@abinabu](https://forum.opensearch.org/u/abinabu)\ **Replies:** 2\ **Last updated:** [August 22, 2025, 8:55am UTC](https://forum.opensearch.org/t/is-nested-querying-supported-for-per-document-monitor/26460 "2025-08-22T08:55:09Z")
Versions: latest Describe the issue: I was experimenting with per-document monitors and is filtering on nested fields supported in this type of monitor? Index mapping snippet: { "\_data\_stream\_timestamp": { "enab… --- ## [Is mTLS possible for webhook alerts?](https://forum.opensearch.org/t/is-mtls-possible-for-webhook-alerts/26376)
**Author:** [@abinabu](https://forum.opensearch.org/u/abinabu)\ **Replies:** 5\ **Last updated:** [August 15, 2025, 1:35pm UTC](https://forum.opensearch.org/t/is-mtls-possible-for-webhook-alerts/26376 "2025-08-15T13:35:06Z")
Versions :Latest Describe the issue: I couldn’t find any documentation or discussions around this mTLS support opensearch alerts? Is it supported and someone point me in the right direction. I’m adding some configs and … --- ## [Per document monitor does not support filebeat data stream?](https://forum.opensearch.org/t/per-document-monitor-does-not-support-filebeat-data-stream/25818)
**Author:** [@igs-employee](https://forum.opensearch.org/u/igs-employee)\ **Replies:** 15\ **Last updated:** [July 21, 2025, 11:16am UTC](https://forum.opensearch.org/t/per-document-monitor-does-not-support-filebeat-data-stream/25818 "2025-07-21T11:16:49Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): 2.9 target: per document monitor on filebeat data stream to capture SSH event to send out email issue: no filebeat data stream / index shown on index selec… --- ## [Cannot execute composite monitor with scripted trigger condition](https://forum.opensearch.org/t/cannot-execute-composite-monitor-with-scripted-trigger-condition/25591)
**Author:** [@MHR](https://forum.opensearch.org/u/MHR)\ **Replies:** 6\ **Last updated:** [July 16, 2025, 12:17pm UTC](https://forum.opensearch.org/t/cannot-execute-composite-monitor-with-scripted-trigger-condition/25591 "2025-07-16T12:17:43Z")
I’m working with OpenSearch version 2.17.1 and trying to set up a composite monitor (workflow) On the OpenSearch Dashboards UI, it’s currently not possible to add a scripted condition (painless) for a trigger — only bas… --- ## [Unable to change "Action execution policy" in Query Level Monitor](https://forum.opensearch.org/t/unable-to-change-action-execution-policy-in-query-level-monitor/25680)
**Author:** [@Pan-Vad](https://forum.opensearch.org/u/Pan-Vad)\ **Replies:** 5\ **Last updated:** [July 10, 2025, 7:08pm UTC](https://forum.opensearch.org/t/unable-to-change-action-execution-policy-in-query-level-monitor/25680 "2025-07-10T19:08:22Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): OpenSearch: 2.19.1 OpenSearch Dashboards: 2.19.1 OS: SUSE Linux Enterprise Server Browser: Chrome Describe the issue: I have a Query Level Monitor configu… --- ## [Configuring OpenSearch Alerting to Telegram](https://forum.opensearch.org/t/configuring-opensearch-alerting-to-telegram/24852)
**Author:** [@Pan-Vad](https://forum.opensearch.org/u/Pan-Vad)\ **Replies:** 3\ **Last updated:** [June 24, 2025, 10:04am UTC](https://forum.opensearch.org/t/configuring-opensearch-alerting-to-telegram/24852 "2025-06-24T10:04:45Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): OpenSearch 3.0 Describe the issue: I’m trying to set up OpenSearch Alerting to send notifications directly to a Telegram chat using a custom webhook channe… --- ## [Per bucket monitor based on top\_hits](https://forum.opensearch.org/t/per-bucket-monitor-based-on-top-hits/24717)
**Author:** [@obi-jan-kenobi](https://forum.opensearch.org/u/obi-jan-kenobi)\ **Replies:** 0\ **Last updated:** [June 10, 2025, 8:58am UTC](https://forum.opensearch.org/t/per-bucket-monitor-based-on-top-hits/24717 "2025-06-10T08:58:36Z")
Versions: OpenSearch: 2.11.0 Describe the issue: I’m fairly new to opensearch alerting and would like to setup a per bucket monitor for the following query: { "size": 0, "query": { "bool": { "filter": \[… --- ## [How do i include message fields in the Alert Action Message](https://forum.opensearch.org/t/how-do-i-include-message-fields-in-the-alert-action-message/8167)
**Author:** [@AndreyB](https://forum.opensearch.org/u/AndreyB)\ **Replies:** 20\ **Last updated:** [October 19, 2023, 3:29am UTC](https://forum.opensearch.org/t/how-do-i-include-message-fields-in-the-alert-action-message/8167 "2023-10-19T03:29:08Z")
Hello, I use OpenSearch for logs from docker containers. I created an alert to Slack and would like to include logs message fields inside the Alert Action Message, For example here is my lo JSON that i would like to t… --- ## [How to store and retrieve full alert history for OpenSearch alerting monitors?"](https://forum.opensearch.org/t/how-to-store-and-retrieve-full-alert-history-for-opensearch-alerting-monitors/24210)
**Author:** [@abhikumar18](https://forum.opensearch.org/u/abhikumar18)\ **Replies:** 2\ **Last updated:** [April 28, 2025, 11:58am UTC](https://forum.opensearch.org/t/how-to-store-and-retrieve-full-alert-history-for-opensearch-alerting-monitors/24210 "2025-04-28T11:58:45Z")
Describe the issue: Hi everyone, I’m working on a system that uses OpenSearch alerting monitors (from the \_plugins/\_alerting/monitors endpoint) to detect conditions and send alerts via Slack and PagerDuty destinations.… --- ## [How to end up sending custom notifications from the opensearch API](https://forum.opensearch.org/t/how-to-end-up-sending-custom-notifications-from-the-opensearch-api/23648)
**Author:** [@xvallspf](https://forum.opensearch.org/u/xvallspf)\ **Replies:** 3\ **Last updated:** [April 22, 2025, 11:20am UTC](https://forum.opensearch.org/t/how-to-end-up-sending-custom-notifications-from-the-opensearch-api/23648 "2025-04-22T11:20:49Z")
Describe the issue: Hi, I have a custom python script that gathers anomalies from the anomaly detection plugin every X minutes, processes and filters them and is supposed to send notifications with the anomalies left af… --- ## [How to configure proxy for alert destinations](https://forum.opensearch.org/t/how-to-configure-proxy-for-alert-destinations/836)
**Author:** [@thanurak](https://forum.opensearch.org/u/thanurak)\ **Replies:** 6\ **Last updated:** [March 31, 2025, 9:11am UTC](https://forum.opensearch.org/t/how-to-configure-proxy-for-alert-destinations/836 "2025-03-31T09:11:27Z")
I’m running OpenDistro for elasticsearch and Kibana on CentOS7 virtual machine. I ran into an issue that my slack webhook is not reachable from ODfES Previous topic I think the issue I have is, I’m behind a proxy. I … --- ## [Alerting key value not showing in OpenSearch Monitor UI](https://forum.opensearch.org/t/alerting-key-value-not-showing-in-opensearch-monitor-ui/23907)
**Author:** [@JJPAPA](https://forum.opensearch.org/u/JJPAPA)\ **Replies:** 0\ **Last updated:** [March 24, 2025, 8:45am UTC](https://forum.opensearch.org/t/alerting-key-value-not-showing-in-opensearch-monitor-ui/23907 "2025-03-24T08:45:29Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): opensearch/dashboard version : 2.18.0 Describe the issue: Hi, I’m currently facing an issue with the Alerting feature in OpenSearch. When I go to Alerting… --- ## [Filtering Notification by user backend roles](https://forum.opensearch.org/t/filtering-notification-by-user-backend-roles/23303)
**Author:** [@daniele.aluigi](https://forum.opensearch.org/u/daniele.aluigi)\ **Replies:** 0\ **Last updated:** [February 3, 2025, 11:51am UTC](https://forum.opensearch.org/t/filtering-notification-by-user-backend-roles/23303 "2025-02-03T11:51:37Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): Version 2.18, issue happened after upgrading (destinations migrated to notifications) Describe the issue: Before upgrading, i was filtering alerting (alert… --- ## [Unable to create monitors without permissions to all indices](https://forum.opensearch.org/t/unable-to-create-monitors-without-permissions-to-all-indices/23070)
**Author:** [@JakeHardy14](https://forum.opensearch.org/u/JakeHardy14)\ **Replies:** 1\ **Last updated:** [January 17, 2025, 4:12pm UTC](https://forum.opensearch.org/t/unable-to-create-monitors-without-permissions-to-all-indices/23070 "2025-01-17T16:12:45Z")
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): Opensearch 2.18.0 Edge Version 131.0.2903.112 (Official build) (64-bit) Describe the issue: I’m trying to create a custom role to assign to a group of use… --- ## [SSL certificate problem for Notification](https://forum.opensearch.org/t/ssl-certificate-problem-for-notification/22513)
**Author:** [@mouse](https://forum.opensearch.org/u/mouse)\ **Replies:** 4\ **Last updated:** [December 19, 2024, 1:24am UTC](https://forum.opensearch.org/t/ssl-certificate-problem-for-notification/22513 "2024-12-19T01:24:17Z")
Hello In Opensearch 2.17 I have a problem with creating a webhook channel. In case of using HTTPS (example httpS://alert.domain.com/wh.php) I get an error: \[status\_exception\] {"event\_status\_list": \[{"config\_id":"XdjKR… [Next page](https://forum.opensearch.org/c/plugins/alerting/7.md?page=1)