stack kb alerting-v2 post-alerting-v2-action-policies cli command

elastic stack kb alerting-v2 post-alerting-v2-action-policies \
  --description <description> \
  --destinations <destinations> \
  --name <name> \
  [options]
		

Create an action policy

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

--description string required

A description of the action policy.

--destinations string[] required

The list of destinations. At least one is required.

Repeatable: pass --destinations multiple times to supply more than one value

--name string required

The name of the action policy.

--group-by string[]

The fields used to group alerts.

Repeatable: pass --group-by multiple times to supply more than one value

--grouping-mode string

The grouping mode for alert notifications.

--matcher string

A KQL query string to match alerts.

--tags string[]

Tags for categorizing the action policy.

Repeatable: pass --tags multiple times to supply more than one value

--throttle string

The throttle configuration for notifications.

--input-file string

path to a JSON file to use as command input

--dry-run

validate all inputs and exit without performing any action (preview changes without applying them)

--no-validate

skip input validation and send the request as-is

--output-fields string

comma-separated list of fields to include in output (dot-notation supported)

--output-template string

Mustache-like template for custom text output (e.g. "{{id}}: {{name}}")

--json

output as JSON