PUT /watcher/watch/httpd_log_error_watch8
{

  "trigger" : { "schedule" : { "interval" : "10s" } },

  "input" : {

    "search" : {

      "request" : {

        "indices" : [ "filebeat*" ],

        "body" : {

          "query" : {

            "match" : { "host": "test82.kartikv.com" }

          }

        }

      }

    }

  },

  "condition" : {

    "compare" : { "host" : { "eq" : "test82.kartikv.com" }}

  },

  "actions" : {

    "email_administrator" : {

      "email" : {

        "to" : "kartik@kartikv.com",

"subject" : "Encountered {{message}} test82 errors",

        "body" : "test82 in the weblog"

      }

    }

  }

}