kibana-alerting

To configure a Kibana threshold alert, select the threshold rule type for your logs index, define the error condition, set a schedule, and attach a notification action to a connector like Slack or webhook to receive alerts.

Kibana alerting supports threshold, anomaly, and ML-backed rules for observability data. You can apply these rule types to monitor logs, metrics, and APM data to detect conditions and trigger actions.

Kibana connector management lets you create and test connectors for email, webhooks, and Slack. You need Kibana access with connector permissions to provision these connectors and validate that actions fire correctly when alerts trigger.

Yes, Kibana alerting integrates with observability tooling to provision rules for APM data. You can use tools like create_alert_rule to define conditions for metrics and automatically trigger configured connector actions when anomalies are detected.

The best way to validate Kibana alerts is to check the rule run history and connector logs within Stack Management. This ensures your observability rules are executing correctly and notifications are successfully firing through configured connectors.