- Watcher Reference for 2.x and 1.x:
- Introduction
- Getting Started
- Customizing Watches
- How Watcher Works
- Installing Watcher
- Administering Watcher
- Configuring Watcher to Send Email
- Configuring Watcher to Send Messages to HipChat
- Configuring Watcher to Send Messages to Slack
- Configuring Watcher to Send PagerDuty Events
- Integrating Watcher with Shield
- Integrating Watcher with Logstash
- Configuring the Default Throttle Period
- Configuring the Default HTTP Timeouts
- Configuring the Default Internal Operations Timeouts
- Getting Watcher Statistics
- Monitoring Watch Execution
- Managing Watches
- Example Watches
- Reference
- Managing Your License
- Limitations
- Troubleshooting
- Release Notes
From version 5.0 onward, Watcher is part of X-Pack. For more information, see
Alerting on cluster and index events.
How Watcher Works
editHow Watcher Works
editOnce you have installed watcher, you can add watches to automatically perform an action when certain conditions are met. The conditions are generally based on data you’ve loaded into the watch by querying an Elasticsearch index or submitting an HTTP request to a web service. For example, you could send an email to the sysadmin when a search of your log data indicates that there are errors.
This topic describes the elements of a watch and how watches operate.
Was this helpful?
Thank you for your feedback.