How to include specific fields (columns) in Kibana Discover links in alert emails?

Elastic Stack Kibana
4

Thank you for the information.

The steps i was asking to follow is as below :

  1. Go to discover & apply all the filter,columns you want to see.
  2. Save this view will all filters/columns with a name ABC
  3. Now you clear all the filters & on discover we will see Open > ABC
  4. On selecting ABC it should auto apply the filters & view will be shown.
  5. Now we have a URL which is formed for this specific view
  6. From the URL you get, it needs to be configured to below :
    https://yourURL/app/discover#/view/yourview_id?_g=(filters%3A!()%2CrefreshInterval%3A(pause%3A!t%2Cvalue%3A0)%2Ctime%3A(from%3A'2024-11-25T10:39:31.310961588Z||-24h'%2Cmode%3Aabsolute%2Cto%3A'2024-11-25T10:39:31.310961588Z'))

Currently it is set to
Time : 2024-11-25T10:39:31.310961588Z
-24h : Time to last 24 hours

This time you need to pull from the Watcher firing time & instead of 24 hours whatever time you want to show this is generally shown as per the interval time of Watcher , if it is scheduled to run every 4 hours than -4h, if every 1h than 1h so need to set this as per your requirement.

And this URL should be used in your alert which is dynamic.

Hope this helps. Please let me know incase if this understanding is wrong?

Thanks!!