- Kibana Guide: other versions:
- Introduction
- Get started
- Set Up Kibana
- Discover
- Visualize
- Creating a Visualization
- Saving Visualizations
- Using rolled up data in a visualization
- Line, Area, and Bar charts
- Controls Visualization
- Data Table
- Markdown Widget
- Metric
- Goal and Gauge
- Pie Charts
- Coordinate Maps
- Region Maps
- Timelion
- TSVB
- Tag Clouds
- Heatmap Chart
- Vega Graphs
- Inspecting Visualizations
- Dashboard
- Canvas
- Graph data connections
- Machine learning
- Maps
- Code
- Infrastructure
- Logs
- APM
- Uptime
- SIEM
- Dev Tools
- Stack Monitoring
- Management
- Reporting from Kibana
- REST API
- Kibana plugins
- Limitations
- Release Highlights
- Breaking Changes
- Release Notes
- Developer guide
Getting Started
editGetting Started
editTo use the Watcher UI, you need to create users with Watcher specific roles as described here.
To access Watcher UI within Kibana:
-
Open Kibana in your web browser and log in. If you are running Kibana
locally, go to
http://localhost:5601/
. -
Click Management in the side navigation, then select Watcher under
Elasticsearch
.
The watch list page within Watcher UI enables you to view all existing watches including stateful information about each watch. This includes State
, Last Fired
and Last Triggered
.
The possible states for watches are:
-
Firing
- The watch is currently triggered and is actively performing the associated actions. -
Error
- The watch is an error state and not properly working. -
Ok
- The watch is not actively firing but working properly. -
Disabled
- The watch will not fire under any circumstance.
To delete or edit a watch, click on its checkbox in the list and then click the Delete or Edit button. Watches that do not have a checkbox are cluster alerts created by X-Pack monitoring and are immutable.
This page also allows you to create a threshold alert or an advanced watch. Let’s first look at creating a threshold alert.