---
title: Query alerts and signals in Discover
description: Use {{esql}} in Discover against `.rule-events` and `.alert-actions`: sample queries, trends, and MTTA-style analysis for {{alerting-v2}}.
url: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/5528/explore-analyze/alerting/kibana-alerting-v2/alerts/query-alerts-and-signals-in-discover-v2
products:
  - Kibana
applies_to:
  - Elastic Cloud Serverless: Preview
  - Elastic Stack: Unavailable
---

# Query alerts and signals in Discover
Discover gives you direct ES|QL access to everything Kibana alerting v2 records, including rule evaluation history, episode progressions, triage actions, and operational metrics like mean time to acknowledge.
The Alerts UI shows current episode state. Discover lets you go further: ask arbitrary questions, spot trends over time, replay how a specific incident unfolded, or correlate alert history with other data in your environment.
To use this page, open Discover, select ES|QL, paste a query from the examples below, then adjust the time range and placeholders (`YOUR_RULE_ID`, `YOUR_GROUP_HASH`) to match your environment.
For field names, types, and episode fields, refer to [Alert states and fields reference](/elastic/docs-content/pull/5528/explore-analyze/alerting/kibana-alerting-v2/alerts/alert-states-and-fields-reference-v2#alert-states-reference-v2) and [Rule event and field reference](/elastic/docs-content/pull/5528/explore-analyze/alerting/kibana-alerting-v2/rules/rule-event-field-reference-v2#rule-reference-v2). For triage in the product UI, refer to [View, manage, and reference alerts](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/5528/explore-analyze/alerting/kibana-alerting-v2/alerts/view-and-manage-alerts-v2).