Skip to content

Commit 0d05889

Browse files
switch back
1 parent 443d4cd commit 0d05889

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

explore-analyze/alerts-cases/alerts/rule-type-es-query.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@ When you create an {{es}} query rule, your choice of query type affects the info
7070
{applies_to}`stack: ga 9.2` If you use {{esql}}, specify a time field and how to group alerts.
7171

7272
Time field
73-
: Specify the time field to use when query results are filtered by the time window that you specify for the rule. You can choose any time field that's availble on the index you're querying, for example, the `@timestamp` field.
73+
: Choose the time field to use when filtering query results by the time window that you later specify for the rule. You can choose any time field that's availble on the index you're querying, for example, the `@timestamp` field.
7474

7575
Alert group
7676
: Select **Create an alert if matches are found** to create a single alert for multiple events matching the {{esql}} query. Select **Create an alert for each row** to create a separate alert for each event that matches the {{esql}} query. Whenever possible, each alert will have a unique ID.

0 commit comments

Comments
 (0)