Unable to fetch data from elasticsearch for alerts

I am unable to get the field (hostname, message) from elasticsearch to grafana for setting up my alerts. I wanted to get hostname as well as event message in my alerts so that it will easy for me to identify errors. I have tried multiple ways to do the same For Example : adding variable for the same but it doesnt works. Help me with the stuff. I am sharing image for the alert which I am receiving as alerts fire ups

The above image shows how an alert is fired without the instance name and you can see in messge/descirption/ I have tried multiple ways to get it by providing different ways of naming it

I am also sharing you the data source inputs that I have configured

1 Like


I have the same behaviour but the problem only occurs with labels that continains dots. I think alertmanager dosen’t support labels with dots.
For example with I use the label kubernetes.namespace the value es “no value” how appear in the screenshot but if i use a label without dot works fine

Did you get solve the problem?

Daniel Vallejo

Hi! I have the same problem. I have logs from Elasticsearch in Grafana and I want to send some value of fields from log raw log, for example from field “message”. I don’t understand how I can do it. If I create panel on dashboard with metric “Count” and create rule alert how I can receive value of field “message” in alert?