If I created an alert rule using elasticsearch query dsl, how can I get the corresponding search object in Discover so that I can see the logs that triggered this alert?
Hello @Baba_Kourouma
Welcome to the community.
Could you please share what is your exact requirement maybe with an example?
You have created an alert using elasticsearch query dsl , to search in discover you can check the query filter used as part of Alert.
Thanks!!
What I want is to be able to have a link in the action (a slack message) that would take me to discover with a view that is equivalent to the elasticsearch query dsl used in the alert rule.
Thank you!