Kibana Alerting Message Variables
Kibana Alerts have been a great new feature to trigger alerts based on threshold and query parameters of Elasticsearch data. The following is documentation (that I could not find) of all variables with their given descriptions:
{{alertId}}
— The ID of the alert
{{alertName}}
— The name of the alert
{{alertInstanceId}}
— The alert instance ID that scheduled actions for the alert
{{alertActionGroup}}
— The alert action group that was used to scheduled actions for the alert.
{{alertActionGroupName}}
— The human readable name of the alert action group that was used to scheduled actions for the alert.
{{alertActionSubgroup}}
— The alert action subgroup that was used to scheduled actions for the alert.
{{context.message}}
— A pre-constructed message for the alert
{{context.conditions}}
— A string describing the threshold comparator and threshold
{{context.date}}
— The date the alert exceeded the threshold
{{context.group}}
— The group that exceeded the threshold
{{context.title}}
— A pre-constructed title for the alert
{{context.value}}
— The value that exceeded the threshold