Kibana Alerting Message Variables

Edward Cernera
2 min readAug 10, 2021
Kibana

Kibana Alerts have been a great new feature to trigger alerts based on threshold and query parameters of Elasticsearch data. The following is documentation (that I could not find) of all variables with their given descriptions:

{{alertId}} — The ID of the alert

{{alertName}} — The name of the alert

{{alertInstanceId}} — The alert instance ID that scheduled actions for the alert

{{alertActionGroup}} — The alert action group that was used to scheduled actions for the alert.

{{alertActionGroupName}} — The human readable name of the alert action group that was used to scheduled actions for the alert.

{{alertActionSubgroup}} — The alert action subgroup that was used to scheduled actions for the alert.

{{context.message}} — A pre-constructed message for the alert

{{context.conditions}} — A string describing the threshold comparator and threshold

{{context.date}} — The date the alert exceeded the threshold

{{context.group}} — The group that exceeded the threshold

{{context.title}} — A pre-constructed title for the alert

{{context.value}} — The value that exceeded the threshold

--

--

Edward Cernera
Edward Cernera

Written by Edward Cernera

Software Engineer | I write software tutorials because I can’t find them anywhere. Creator of DealPunkk - dealpunkk.com | About Me - cernera.me/edward