Error: Failed evaluating trigger: ctx.results[0].hits.total.value > 0 ^---- HERE

OpenSearch
1

Currently we are using opensearch in AWS and I am trying to send alerts to our ticketing system in which the syslog message contains the phrase “PORT_SECURITY-2-PSECURE_VIOLATION”
The first alert came in no problem, but the second alert did not come in

I currently have the internal set to run every minute and the trigger to be ctx.results[0].hits.total.value > 0

Error: Failed evaluating trigger: ctx.results[0].hits.total.value > 0 ^---- HERE

How do I resolve the state issue?

2

@mmercald I understand that this is a query in the Alerting Monitor.
Have you tested your query? Does the source index exist?