diff --git a/solutions/observability/incident-management/create-an-elasticsearch-query-rule.md b/solutions/observability/incident-management/create-an-elasticsearch-query-rule.md index 670c6412a3..1aa73329c0 100644 --- a/solutions/observability/incident-management/create-an-elasticsearch-query-rule.md +++ b/solutions/observability/incident-management/create-an-elasticsearch-query-rule.md @@ -195,6 +195,9 @@ The following variables are specific to this rule type. You can also specify [va `context.date` : The date, in ISO format, that the rule met the condition. Example: `2022-02-03T20:29:27.732Z`. +`context.grouping` {applies_to}`stack: ga 9.1` +: The object containing groups that are reporting data. + `context.hits` : The most recent documents that matched the query. Using the [Mustache](https://mustache.github.io/) template array syntax, you can iterate over these hits to get values from the {{es}} documents into your actions. diff --git a/solutions/observability/incident-management/create-an-error-count-threshold-rule.md b/solutions/observability/incident-management/create-an-error-count-threshold-rule.md index b1c5ee8d52..72bb41041b 100644 --- a/solutions/observability/incident-management/create-an-error-count-threshold-rule.md +++ b/solutions/observability/incident-management/create-an-error-count-threshold-rule.md @@ -128,6 +128,9 @@ The following variables are specific to this rule type. You can also specify [va `context.errorGroupingName` : The error grouping name the alert is created for. +`context.grouping` {applies_to}`stack: ga 9.1` +: The object containing groups that are reporting data. + `context.interval` : The length and unit of time period where the alert conditions were met. diff --git a/solutions/observability/incident-management/create-an-inventory-rule.md b/solutions/observability/incident-management/create-an-inventory-rule.md index 0880646879..05ba6767c3 100644 --- a/solutions/observability/incident-management/create-an-inventory-rule.md +++ b/solutions/observability/incident-management/create-an-inventory-rule.md @@ -138,6 +138,9 @@ The following variables are specific to this rule type. You can also specify [va `context.group` : Name of the group reporting data. +`context.grouping` {applies_to}`stack: ga 9.2` +: The object containing groups that are reporting data. + `context.host` : The host object defined by ECS if available in the source. diff --git a/solutions/observability/incident-management/create-an-slo-burn-rate-rule.md b/solutions/observability/incident-management/create-an-slo-burn-rate-rule.md index ebd442c891..1a323cd381 100644 --- a/solutions/observability/incident-management/create-an-slo-burn-rate-rule.md +++ b/solutions/observability/incident-management/create-an-slo-burn-rate-rule.md @@ -132,6 +132,9 @@ The following variables are specific to this rule type. You can also specify [va `context.burnRateThreshold` : The burn rate threshold value. +`context.grouping` {applies_to}`stack: ga 9.1` +: The object containing groups that are reporting data. + `context.longWindow` : The window duration with the associated burn rate value. diff --git a/solutions/observability/incident-management/create-custom-threshold-rule.md b/solutions/observability/incident-management/create-custom-threshold-rule.md index 1c8d21e209..1bad81b508 100644 --- a/solutions/observability/incident-management/create-custom-threshold-rule.md +++ b/solutions/observability/incident-management/create-custom-threshold-rule.md @@ -219,6 +219,9 @@ The following variables are specific to this rule type. You can also specify [va : The container object defined by ECS if available in the source. `context.group` +: The array of objects containing groups that are reporting data. + +`context.grouping` {applies_to}`stack: ga 9.1` : The object containing groups that are reporting data. `context.host` diff --git a/solutions/observability/incident-management/create-failed-transaction-rate-threshold-rule.md b/solutions/observability/incident-management/create-failed-transaction-rate-threshold-rule.md index 9183db4acb..a80f3cc0fd 100644 --- a/solutions/observability/incident-management/create-failed-transaction-rate-threshold-rule.md +++ b/solutions/observability/incident-management/create-failed-transaction-rate-threshold-rule.md @@ -122,6 +122,9 @@ The following variables are specific to this rule type. You can also specify [va `context.environment` : The transaction type the alert is created for. +`context.grouping` {applies_to}`stack: ga 9.1` +: The object containing groups that are reporting data. + `context.interval` : The length and unit of time period where the alert conditions were met. diff --git a/solutions/observability/incident-management/create-latency-threshold-rule.md b/solutions/observability/incident-management/create-latency-threshold-rule.md index 066345a2d3..b7925496e3 100644 --- a/solutions/observability/incident-management/create-latency-threshold-rule.md +++ b/solutions/observability/incident-management/create-latency-threshold-rule.md @@ -126,6 +126,9 @@ The following variables are specific to this rule type. You can also specify [va `context.environment` : The transaction type the alert is created for. +`context.grouping` {applies_to}`stack: ga 9.1` +: The object containing groups that are reporting data. + `context.interval` : The length and unit of time period where the alert conditions were met. diff --git a/solutions/observability/incident-management/create-log-threshold-rule.md b/solutions/observability/incident-management/create-log-threshold-rule.md index dcb575ec76..351ab4d83a 100644 --- a/solutions/observability/incident-management/create-log-threshold-rule.md +++ b/solutions/observability/incident-management/create-log-threshold-rule.md @@ -159,6 +159,9 @@ The following variables are specific to this rule type. You an also specify [var `context.alertDetailsUrl` : Link to the alert troubleshooting view for further context and details. This will be an empty string if the `server.publicBaseUrl` is not configured. +`context.grouping` {applies_to}`stack: ga 9.2` +: The object containing groups that are reporting data. + `context.interval` : The length and unit of time period where the alert conditions were met. diff --git a/solutions/observability/incident-management/create-metric-threshold-rule.md b/solutions/observability/incident-management/create-metric-threshold-rule.md index 705ab4556f..d9c875cd10 100644 --- a/solutions/observability/incident-management/create-metric-threshold-rule.md +++ b/solutions/observability/incident-management/create-metric-threshold-rule.md @@ -143,6 +143,9 @@ The following variables are specific to this rule type. You an also specify [var `context.groupByKeys` : The object containing groups that are reporting data. +`context.grouping` {applies_to}`stack: ga 9.2` +: The object containing groups that are reporting data. + `context.host` : The host object defined by ECS if available in the source.