Alert when no message come in

[gianluca-valentini]

Hi,
using Graylog 4 is there a way to have a Slack notification when no messages coming in on a selected Stream?

How I can define the filter and aggregations?

Thanks
Gianluca

[H2Cyber]

Alerting/Notification when certain sources are not reporting

Here is a suggestion : Create an event definition that runs every X minutes (define X as you see fit). In aggregation, define a condition based on the card() of the “source” field. If it is anything less than your number of sources, fire an alert.

[gianluca-valentini]

Thanks @H2Cyber

can works for you?
Thanks
Gianluca