threshold alert and index connector problem

[benibomba]

Kibana version: 7.17.18

Elasticsearch version: 7.17.18

Server OS version: Red Hat 8

Browser version: Latest Google Chrome x64

Original install method (e.g. download page, yum, from source, etc.): download page

Describe the bug: Problem with threshold alert and index connector

Good afternoon, I am facing a problem with kibana alerts. I am using threshold alert with index connector. I'm trying to write a json like this

{
  "message": """{{{#context.alerts}}}
host.name: {{{host.name}}}
{{/context.alerts}}"""
}

But it ends up writing this host.name: to the index.
As I understand it, this is because in the original json host.name is not written as an object. How to make it write as event.k Has anyone encountered this? Is there a solution for this?

Steps to reproduce:

1. Create index connector
2. Create threshold alert group by host.name and action index connector with json

{
  "message": {{.}}
}

5. In index you will see field message with json, in this you will see contex -> alerts -> host.name

Expected behavior:

contex -> alerts -> host -> name

Screenshots (if relevant):

Errors in browser console (if relevant):

Provide logs and/or server output (if relevant):

Any additional context:

[jsanz]

Hi, thanks for creating an issue, but this does not look like a software bug and would be better addressed in our Kibana discussion forum at:

https://discuss.elastic.co/c/elastic-stack/kibana/7

Please add the appropriate tag (dashboard, vega, map, etc) to speed up the triage.

Closing.