It's easier than that. Do the search
source="ES.csv" index="mdata" sourcetype="csv"
and set the alerting options to alert you when it does not return results.
It's easier than that. Do the search
source="ES.csv" index="mdata" sourcetype="csv"
and set the alerting options to alert you when it does not return results.
thanks, I will try it. As you said, very straightforward!