My use case is that I have log data with a message and exception fields, and I am sending slack alerts when the query finds log level >= ERROR. However the exception field is too big to put into slack messages, it means the message gets chunked, which then ruins the formatting. I would like to tru…

Transforming query data in an alert

_uj August 15, 2023, 4:45pm 4

If you do not upgrade to version 2.9, you can find a transformation hack in this thread of mine.

Topic		Replies	Views
Mustache template aggregate, group by Alerting	3	3692	November 28, 2020
How to send alert containing extraction one field from message JSON Alerting	1	572	January 5, 2022
Formatting mustache for MS-Teams webhook Alerting	2	900	November 16, 2020
Alert should message not only value trigged but also query resulting dataset with fields info Alerting	2	674	November 19, 2021
Kibana Alerting Alerting	7	6742	January 5, 2021