Alert on OpenSearch logs

[jangaraj]

See example: Warning when creating an Alert: "Expression warning - 1 items dropped from union(s): ["${B} > 1.000000": (1.000000: {})]"
Of course you need to write Opensearch (Lucene) query in your case.