kibana-alerting

Configure Kibana alerting rules and connectors for threshold, anomaly, and ML conditions.

6|Updated Feb 20, 2026

Search Tags:#monitoring #observability #alerting #rules #connectors #kibana

Ready to run

npx skills add https://github.com/patrykkopycinski/elastic-cursor-plugin --skill kibana-alerting

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: kibana-alerting
Source: https://github.com/patrykkopycinski/elastic-cursor-plugin/tree/main/.cursor/skills/kibana-alerting
Command: npx skills add https://github.com/patrykkopycinski/elastic-cursor-plugin --skill kibana-alerting

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps users create, configure, and validate alerting rules and connectors in Kibana so monitoring conditions reliably trigger the right notifications and actions.

Core Features & Use Cases

Connector Management: Ensure or create connectors (email, webhook, Slack) so actions can fire when alerts trigger.
Rule Creation Guidance: Walk through selecting rule type (threshold, anomaly, ML, observability), setting schedules, defining conditions, and attaching actions.
Observability Integration: Use observability tools (create_alert_rule) for APM, logs, and metrics-based alerts and prefer them when applicable.
Use Case: Create a threshold alert for an errors index that notifies a Slack channel and validate the rule run history and connector logs.

Quick Start

Ask the skill to create a threshold alert for index 'logs-*' that notifies a Slack connector when error rate exceeds 5%.

Frequently Asked Questions about kibana-alerting

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I configure a threshold alert in Kibana for error logs?▼

To configure a Kibana threshold alert, select the threshold rule type for your logs index, define the error condition, set a schedule, and attach a notification action to a connector like Slack or webhook to receive alerts.

What types of alerting rules can I create for observability data in Kibana?▼

Kibana alerting supports threshold, anomaly, and ML-backed rules for observability data. You can apply these rule types to monitor logs, metrics, and APM data to detect conditions and trigger actions.

How do I set up and test connectors for Kibana alert notifications?▼

Kibana connector management lets you create and test connectors for email, webhooks, and Slack. You need Kibana access with connector permissions to provision these connectors and validate that actions fire correctly when alerts trigger.

Can I use Kibana alerting to monitor APM metrics and trigger automated actions?▼

Yes, Kibana alerting integrates with observability tooling to provision rules for APM data. You can use tools like create_alert_rule to define conditions for metrics and automatically trigger configured connector actions when anomalies are detected.

What is the best way to validate rule run history and connector logs in Stack Management?▼

The best way to validate Kibana alerts is to check the rule run history and connector logs within Stack Management. This ensures your observability rules are executing correctly and notifications are successfully firing through configured connectors.