# Opensearch alerts are not working as expected

**URL:** <https://forum.opensearch.org/t/opensearch-alerts-are-not-working-as-expected/11791>\
**Category:** Alerting\
**Created:** [December 13, 2022, 9:15am UTC](https://forum.opensearch.org/t/opensearch-alerts-are-not-working-as-expected/11791 "2022-12-13T09:15:37Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![karthik499](https://avatars.discourse-cdn.com/v4/letter/k/c68b51/32.png) [@karthik499](https://forum.opensearch.org/u/karthik499)\
**Post date:** [December 13, 2022, 9:15am UTC](https://forum.opensearch.org/t/opensearch-alerts-are-not-working-as-expected/11791/1 "2022-12-13T09:15:37Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):

2.4.0

centos -7

**Describe the issue** :

Not populating new alerts when there is existing acknowledged alert presence on trigger.

**Configuration** :

{  
“name”: “Ipmi-monitor”,  
“type”: “monitor”,  
“monitor\_type”: “query\_level\_monitor”,  
“enabled”: true,  
“schedule”: {  
“period”: {  
“unit”: “MINUTES”,  
“interval”: 5  
}  
},  
“inputs”: [  
{  
“search”: {  
“indices”: [  
“syslog-ng-dc4”  
],  
“query”: {  
“query”: {  
“query\_string”: {  
“query”: “NOT (PRIORITY:info) AND (PROGRAM: ipmi)”,  
“fields”: ,  
“type”: “best\_fields”,  
“default\_operator”: “or”,  
“max\_determinized\_states”: 10000,  
“enable\_position\_increments”: true,  
“fuzziness”: “AUTO”,  
“fuzzy\_prefix\_length”: 0,  
“fuzzy\_max\_expansions”: 50,  
“phrase\_slop”: 0,  
“escape”: false,  
“auto\_generate\_synonyms\_phrase\_query”: true,  
“fuzzy\_transpositions”: true,  
“boost”: 1  
}  
}  
}  
}  
}  
],  
“triggers”: [  
{  
“query\_level\_trigger”: {  
“id”: “ZoC68YQBhZCVQ7W0rUan”,  
“name”: “ipmi-query-trigger”,  
“severity”: “1”,  
“condition”: {  
“script”: {  
“source”: “ctx.results[0].hits.total.value \> 0”,  
“lang”: “painless”  
}  
},  
“actions”:   
}  
},  
{  
“query\_level\_trigger”: {  
“id”: “8TZoBYUBTM5\_bigcFNtt”,  
“name”: “ipmi-query-trigger-1”,  
“severity”: “1”,  
“condition”: {  
“script”: {  
“source”: “ctx.results[0].hits.total.value \> 0”,  
“lang”: “painless”  
}  
},  
“actions”:   
}  
}  
],  
“ui\_metadata”: {  
“schedule”: {  
“timezone”: null,  
“frequency”: “interval”,  
“period”: {  
“unit”: “MINUTES”,  
“interval”: 5  
},  
“daily”: 0,  
“weekly”: {  
“tue”: false,  
“wed”: false,  
“thur”: false,  
“sat”: false,  
“fri”: false,  
“mon”: false,  
“sun”: false  
},  
“monthly”: {  
“type”: “day”,  
“day”: 1  
},  
“cronExpression”: “0 \*/1 \* \* \*”  
},  
“monitor\_type”: “query\_level\_monitor”,  
“search”: {  
“searchType”: “query”,  
“timeField”: “”,  
“aggregations”: ,  
“groupBy”: ,  
“bucketValue”: 1,  
“bucketUnitOfTime”: “h”,  
“where”: {  
“fieldName”: ,  
“fieldRangeEnd”: 0,  
“fieldRangeStart”: 0,  
“fieldValue”: “”,  
“operator”: “is”  
}  
}  
}  
}

**Relevant Logs or Screenshots** :

 ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/a/a681b2fa3c1d2aafe0807965165939b85e7f8c0b.jpeg)