icon

Alerting

Customized triggers that spring automated workflows into action

Applications not responding. CPU and RAM utilization jumping. Signs of attack. See these warnings as they happen — not as part of the post-mortem.

New

7.10 adds the ability to control alerts using RBAC as well as a new IBM Resilient action.

Create alerts in-app with context

Often the idea to create an alert occurs when you're working with relevant data. Create alerts in the moment with a rich flyout menu — no matter if you’re fully immersed in the APM, Metrics, Uptime, or Security application.

Monitor all of your alerts in one place in Kibana

Want a holistic view? Head to the Alerts and Actions section inside the Kibana Management tab to see, search, and filter all of your alerts from a central location.

Use alerts with Elastic Maps to track entities that matter

Get notified when a moving object crosses a predefined geo boundary. Combine powerful mapping features with flexible alerting options to build a 24/7 real time geographic monitoring system.

Get notified, your way

Extend your alerts by connecting them to actions that use built-in integrations for email, Slack, PagerDuty, ServiceNow, Jira, and IBM Security Resilient. Alerting inside the Elastic Stack also supports a powerful webhook output letting you tie into additional third-party systems that matter to your organization.

The framework is also configurable to include relevant information from your search in the notification and ships with simple template support.

Control access to alerts with flexible permissions

Kibana’s simple, yet powerful security interface gives you the power to use role-based-access-control (RBAC) to decide who can both view and create alerts. What's more, you can even separately govern who has the ability to connect those alerts to third-party actions.

Learn from your Elasticsearch alert history

A complete history of all alert executions is indexed into Elasticsearch for easy tracking and visualization in Kibana. Are my alerts executing? How often are my conditions being met? What actions were taken?