index threshold rule does not work as expected with a threshold below a value #103922
Labels
bug
Fixes for quality problems that affect the customer experience
Feature:Alerting/RuleTypes
Issues related to specific Alerting Rules Types
Feature:Alerting
loe:small
Small Level of Effort
research
Team:ResponseOps
Label for the ResponseOps team (formerly the Cases and Alerting teams)
Kibana version:
7.13.2
Elasticsearch version:
7.13.2
*Original install method (e.g. download page, yum, from source, etc.):
ECE 2.7.1
Describe the bug:
A index threshold rule with a condition below a value is not active when it should be.
A similar Elasticsearch query rule with a condition below a value is working as expected.
Steps to reproduce:
index threshold
type rule on a index with a@timestamp
field but no recent data in it. Use acount()
overall document
and a conditionis below
1
overthe last 5 minutes
.OK
Expected behavior:
the status should be
Active
Screenshots (if relevant):
rule configuration where some test data can be seen. no alert was triggered.
Errors in browser console (if relevant):
no error in browser or server logs
Any additional context:
The purpose of this rule is detecting when no document are ingested in some index that should continuously received data.
condition
is above
works as expected.condition
is between
as the same problem.The text was updated successfully, but these errors were encountered: