Mail Output:

Hello Team,There are 4 long running process on these sever in the last minute. Find details below:

Server	Process	User	Time
"server-2.anant.com"	t@-109526	User1	551.0
"server-2.anant.com"	t@-109477	User1	1030.0
"server-2.anant.com"	t@-109471	User3	2591.0
"server-2.anant.com"	t@-109521	User3	1537.0
Regards, Team Admin



Alert Config:

{
  "trigger": {
    "schedule": {
      "interval": "1m"
    }
  },
  "input": {
    "search": {
      "request": {
        "search_type": "query_then_fetch",
        "indices": [
          "monitorthread1"
        ],
        "rest_total_hits_as_int": true,
        "body": {
          "query": {
            "bool": {
              "must": [
                {
                  "range": {
                    "timeStampForThread": {
                      "gte": "now-1m"
                    }
                  }
                },
                {
                  "range": {
                    "activeTimeForThread": {
                      "gte": "500"
                    }
                  }
                }
              ]
            }
          }
        }
      }
    }
  },
  "condition": {
    "compare": {
      "ctx.payload.hits.total": {
        "gte": 0
      }
    }
  },
  "actions": {
    "email_admin": {
      "email": {
        "profile": "standard",
        "to": [
          "'Anant Kumar <anantrod@gmail.com>'"
        ],
        "subject": "process report",
        "body": {
          "html": "<p>Hello Team,There are {{ctx.payload.hits.total}} long running process on these sever in the last minute. Find details below:</p><p><table style='border-collapse:collapse;border-spacing:0;border-color:#ccc'><th style='font-weight:bold;padding:4px 8px;border-style:solid;border-width:1px;overflow:hidden;word-break:normal;border-color:inherit;color:#333333;background-color:#c0c0c0;text-align:center;vertical-align:middle'>Server</th><th style='font-weight:bold;padding:4px 8px;border-style:solid;border-width:1px;overflow:hidden;word-break:normal;border-color:inherit;color:#333333;background-color:#c0c0c0;text-align:center;vertical-align:middle'>Process</th><th style='font-weight:bold;padding:4px 8px;border-style:solid;border-width:1px;overflow:hidden;word-break:normal;border-color:inherit;color:#333333;background-color:#c0c0c0;text-align:center;vertical-align:middle'>User</th><th style='font-weight:bold;padding:4px 8px;border-style:solid;border-width:1px;overflow:hidden;word-break:normal;border-color:inherit;color:#333333;background-color:#c0c0c0;text-align:center;vertical-align:middle'>Time</th></tr> {{#ctx.payload.hits.hits}} <tr><td style='padding:4px 8px;border-style:solid;border-width:1px;overflow:hidden;word-break:normal;border-color:#ccc;color:#333;background-color:#fff;text-align:left;vertical-align:top'> {{_source.serverName}}</td><td style='padding:4px 8px;border-style:solid;border-width:1px;overflow:hidden;word-break:normal;border-color:#ccc;color:#333;background-color:#fff;text-align:left;vertical-align:top'> {{_source.threadName}}</td><td style='padding:4px 8px;border-style:solid;border-width:1px;overflow:hidden;word-break:normal;border-color:#ccc;color:#333;background-color:#fff;text-align:left;vertical-align:top'> {{_source.userName}}</td><td style='padding:4px 8px;border-style:solid;border-width:1px;overflow:hidden;word-break:normal;border-color:#ccc;color:#333;background-color:#fff;text-align:left;vertical-align:top'> {{_source.activeTimeForThread}}</td> </tr> {{/ctx.payload.hits.hits}} </table></p> <p>Regards, Team Admin</p>"
        }
      }
    }
  }
}