All Collections
Logs Management
How to send email alerts & notifications from Logit
How to send email alerts & notifications from Logit

Discover the steps you need to take to setup and configure email alerts from your ELK stacks in this helpful article.

Chris Cottam avatar
Written by Chris Cottam
Updated over a week ago

It only takes a few minutes to add Alerting to any of your Logit ELK stacks. Once enabled, you'll be able to edit and set up alerting rules for all your stacks and to as many different email addresses as you need!

Provision Alerting for your Stack

When you log in your stacks are displayed on the dashboard. To enable alerting for a stack, choose 'View Stack Settings'. dashboard

Next, choose 'Alerting & Notifications' and then choose 'Setup alerting for this Stack' alerting setup

Create your Alerting Rule

Use the code block below to quickly get started with your email alert.

name: Production App Errors

type: any

# (Required)
# Index to search, wildcard supported

index: logstash-*

## Receive an alert for every single match

  minutes: 0

# (Required)
# A list of elasticsearch filters used for find events
# These filters are joined with AND and nested in a filtered query

- query:
      query: "type: error"

# (Required)
# The alert used when a match is found
- "email"

# (required, email specific)
# a list of email addresses to send alerts to


- ""

How to use the code

  1. Paste the code into the alert replacing any existing rule.

  2. Then just edit the code to match the filter query you need, in this case we are looking for matches on "type:error".

  3. Replace with the required email address.

  4. Choose test to run the rule against your data over the last 2 hrs.

  5. Once happy, choose update to apply and save the rule.

Configure alerts to send emails to more than one email address

Now that you have your new alert rule set up you may want to alert more than one email at a time. To do this you will need to edit the code which contains your rule.

Edit your code
At the bottom of the code, there is the option for email followed by the '" email address. To add another simply add a separate line followed by the email address. For example - 

# (required, email specific)
# a list of email addresses to send alerts to


- ""
- ""
- ""

Test your alert
Once you have added the required emails you need to test the rule works. So choose either test option. test alert

Once the test passes hit the update rule button, this will save and enable the alert rule for your stack. You can see from the console output more details about how your alert rule will behave once applied. alert settings

What's next?

Did this answer your question?