Hello, I am new to Kibana and trying to setup alerts.
I am using the below script for getting the 503 errors but i want the alert to be triggered only when 503 errors occurs 100 times in an hour.
Could you please help me how to do that.
{
“size”: 10,
“query”: {
“bool”: {
“must”: [
{
“query_string”: {
“query”: “503”,
“fields”: ,
“type”: “best_fields”,
“default_operator”: “or”,
“max_determinized_states”: 10000,
“enable_position_increments”: true,
“fuzziness”: “AUTO”,
“fuzzy_prefix_length”: 0,
“fuzzy_max_expansions”: 50,
“phrase_slop”: 0,
“escape”: false,
“auto_generate_synonyms_phrase_query”: true,
“fuzzy_transpositions”: true,
“boost”: 1
}
}
],
“filter”: [
{
“range”: {
“@timestamp”: {
“from”: “{{period_end}}||-1h”,
“to”: “{{period_end}}”,
“include_lower”: true,
“include_upper”: true,
“boost”: 1
}
}
}
],
“adjust_pure_negative”: true,
“boost”: 1
}
}
}
No, could you please help me if you have any idea on this.