Skip to content

Commit 080ca0b

Browse files
phrasing change
1 parent b9667bc commit 080ca0b

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

explore-analyze/alerts-cases/alerts/rule-type-es-query.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ When you create an {{es}} query rule, your choice of query type affects the info
7373
: Choose the time field to use when filtering query results by the time window that you later specify for the rule. You can choose any time field that's availble on the index you're querying, for example, the `@timestamp` field.
7474

7575
Alert group
76-
: Select **Create an alert if matches are found** to create a single alert for multiple events matching the {{esql}} query. Select **Create an alert for each row** to create a separate alert for each event that matches the {{esql}} query. Whenever possible, each alert will have a unique ID.
76+
: Select **Create an alert if matches are found** to create a single alert for multiple events matching the {{esql}} query. Select **Create an alert for each row** to create a separate alert for each event that matches the {{esql}} query. Whenever possible, each alert is given a unique ID.
7777

7878

7979
3. Set the time window, which defines how far back to search for documents.

solutions/observability/incident-management/create-an-elasticsearch-query-rule.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -82,7 +82,7 @@ When you create an {{es}} query rule, your choice of query type affects the info
8282
: Choose the time field to use when filtering query results by the time window that you later specify for the rule. You can choose any time field that's availble on the index you're querying, for example, the `@timestamp` field.
8383

8484
Alert group
85-
: Select **Create an alert if matches are found** to create a single alert for multiple events matching the {{esql}} query. Select **Create an alert for each row** to create a separate alert for each event that matches the {{esql}} query. Whenever possible, each alert will have a unique ID.
85+
: Select **Create an alert if matches are found** to create a single alert for multiple events matching the {{esql}} query. Select **Create an alert for each row** to create a separate alert for each event that matches the {{esql}} query. Whenever possible, each alert is given a unique ID.
8686

8787
3. Set the time window, which defines how far back to search for documents.
8888
4. If you use query DSL, KQL, or Lucene, set the number of documents to send to the configured actions when the threshold condition is met.

0 commit comments

Comments
 (0)