Alerting query conditions

[ivanahuckova]

Hello @taxmeifyoucan! You can actually create alert with multiple queries. Check this thread for more information:

How to create alert based on multiple queries?

Sorry for my bad English, not my mother tongue… Oke, I’ll explain Create the different datasource, in my case, I use metricbeat and auditbeat Build new dashboard using Graph Visualization Select the datasource to --Mixed– [image] Add first query A for first datasource by selecting the datasource using +Query, select Metricbeat [image] Build the query as you need… Add second query B for datasource auditbeat using select the datasource using +Query [image] Above steps, create multiple query…