hi
i’m working with AWS elk service
i’m setting an alert from opendistro kibana to pager duty
all of the values i’m passing are ok except for one - {{ctx.monitor.inputs.0.search.indices}}
i want to show in the alert i’m getting from which indices the alert was generated
in the preview windows it looks fine and show the result but in the message sent it’s missing
any idea why ? or how to fix it ?
thanks
I think should be
ctx.monitor.inputs.search.indices #An array that contains the indices the monitor observes.
But I suggest to test this both to see wich is getting the correct values
{{ctx.monitor.inputs.0.search.indices}}
{{ctx.monitor.inputs.0}}
{{ctx.monitor.inputs.search.indices}}
I had a similar problem once with ctx.results.0.hits.hits
make sure you are handling the array correctly on the body message
{{#ctx.results.0.hits.hits}}
{{#_source.message.requestParameters.key}}
{{/_source.message.requestParameters.key}}
{{#_source.message.requestParameters.key}}
{{/_source.message.requestParameters.key}}
{{/ctx.results.0.hits.hits}}
Can you show the body message?