Alerting and notification

Every organization needs a system that is capable of alerting whenever required. This component of X-Pack provides us with flexibility to create alerts and notifications based on some conditions which get triggered due to change in data. Due to the requirement of having a real-time alert mechanism through which you can trigger some actions based on the conditions specified arises the need for this component named Watcher. It grew out of the necessity of creating actions on the go as and when required without requiring changing the configuration across the Stack. If seen closely, we can create such alerts based on conditions by specifying them directly in the Logstash configuration file using appropriate filters and output plugins. But doing so every time to create a new type of alert would require proper testing before making changes in production environment. Instead of making any changes in the existing setup, you can create your own rules on the go to get alerted...