# Best way to catch alerting errors

**URL:** <https://forum.opensearch.org/t/best-way-to-catch-alerting-errors/15199>\
**Category:** Alerting\
**Created:** [July 21, 2023, 3:35pm UTC](https://forum.opensearch.org/t/best-way-to-catch-alerting-errors/15199 "2023-07-21T15:35:46Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![opensuser](https://avatars.discourse-cdn.com/v4/letter/o/5daacb/32.png) [@opensuser](https://forum.opensearch.org/u/opensuser)\
**Post date:** [July 21, 2023, 3:35pm UTC](https://forum.opensearch.org/t/best-way-to-catch-alerting-errors/15199/1 "2023-07-21T15:35:46Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser): 2.6  
**Describe the issue** : [Email size larger than 10000](https://forum.opensearch.org/t/email-size-larger-than-10000/13998)

I’m wondering what is the appropriate way to catch such errors described in the mentioned thread. Something like “alerting on alerting error”…

---

<div class="post-metadata">

**Author:** ![Eugene7](https://avatars.discourse-cdn.com/v4/letter/e/bbce88/32.png) [@Eugene7](https://forum.opensearch.org/u/Eugene7)\
**Post date:** [July 24, 2023, 5:41pm UTC](https://forum.opensearch.org/t/best-way-to-catch-alerting-errors/15199/2 "2023-07-24T17:41:37Z")

</div>

Hi @opensuser

You can log all warnings and errors from your OpenSearch cluster to the external OpenSearch cluster. On the external cluster, you can configure alerts for this type of warning.

---

<div class="post-metadata">

**Author:** ![opensuser](https://avatars.discourse-cdn.com/v4/letter/o/5daacb/32.png) [@opensuser](https://forum.opensearch.org/u/opensuser)\
**Post date:** [July 25, 2023, 6:52am UTC](https://forum.opensearch.org/t/best-way-to-catch-alerting-errors/15199/3 "2023-07-25T06:52:29Z")

</div>

I’ll need a 2nd OpenSearch cluster just to catch errors from the 1st one… This approach looks like a huge overkill.  
BTW, what logs should I check to find that errors? The only place I saw that error was in the Kibana GUI under Alerts. I checked Kibana logs as well as OpenSearch by “Email size larger than 10000” search string and found nothing.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/3/33547ea01a5b12dcca2958411d3edd97ae2ea8c1.png) [@system](https://forum.opensearch.org/u/system)\
**Post date:** [September 23, 2023, 6:52am UTC](https://forum.opensearch.org/t/best-way-to-catch-alerting-errors/15199/4 "2023-09-23T06:52:57Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.