Alerting for pods

Hi all.
I have ELK 7.7 with filebeat and metricbeat installed in a kubernetes cluster. I have also all the dashboards that comes with both Beats.
Now I need to monitoring and alerting when some pods are not present/running and not sure how to make the query for that. I have also installed the destination with AWS SNS and it’s all working fine.

Any idea/best way to do so?


Alerting - Open Distro Documentation is a good starting point.

Hi there. thanks but what I am looking for is a way to trigger an alert when a pod goes down. Which query should I use and if anyone already done that.

that’s all