stack kb alerting-v2 post-alerting-v2-action-policies cli command

elastic stack kb alerting-v2 post-alerting-v2-action-policies \
  --description <description> \
  --destinations <destinations> \
  --name <name> \
  [options]
		

Create an action policy

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

--description string required

A description of the action policy.

--destinations string[] required

The list of destinations. At least one is required.

Repeatable: pass --destinations multiple times to supply more than one value

--name string required

The name of the action policy.

--group-by string[]

The fields used to group alerts.

Repeatable: pass --group-by multiple times to supply more than one value

--grouping-mode string

The grouping mode for alert notifications.

--matcher string

Selects the alerts this policy applies to. Set tags to match alerts from rules with those tags. Set expression to a KQL query, which will be evaluated against each alert. <br/><br/> If you set both tags and expression, an alert must match the tags and the expression for the policy to apply. When matcher is null, or when both tags and expression are empty, the policy applies to all alerts.

--throttle string

The throttle configuration for notifications.

--input-file string

path to a JSON file to use as command input

--dry-run

validate all inputs and exit without performing any action (preview changes without applying them)

--no-validate

skip input validation and send the request as-is

--output-fields string

comma-separated list of fields to include in output (dot-notation supported)

--output-template string

Mustache-like template for custom text output (e.g. "{{id}}: {{name}}")

--json

output as JSON