# Alerts conditions for multiple field values

**URL:** <https://community.graylog.org/t/alerts-conditions-for-multiple-field-values/724>\
**Category:** Graylog Central (peer support)\
**Created:** [April 6, 2017, 2:19pm UTC](https://community.graylog.org/t/alerts-conditions-for-multiple-field-values/724 "2017-04-06T14:19:10Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mantil](https://avatars.discourse-cdn.com/v4/letter/m/ecd19e/32.png) [@Mantil](https://community.graylog.org/u/Mantil)\
**Post date:** [April 6, 2017, 2:19pm UTC](https://community.graylog.org/t/alerts-conditions-for-multiple-field-values/724/1 "2017-04-06T14:19:10Z")

</div>

I know you can trigger an alert if a field value exists. But is there a way to trigger an alert if two field values equal whatever value we are looking for? Example. Trigger alert If Field A = X AND Field B = Z

---

<div class="post-metadata">

**Author:** ![yomgui666](https://avatars.discourse-cdn.com/v4/letter/y/b9e5f3/32.png) [@yomgui666](https://community.graylog.org/u/yomgui666)\
**Post date:** [July 19, 2018, 8:26am UTC](https://community.graylog.org/t/alerts-conditions-for-multiple-field-values/724/2 "2018-07-19T08:26:12Z")

</div>

Hi Matt,

I’ve got the same problem, more generally trying to figure out how to create notifications based on “complex” conditions.  
From what i understand, we have to create multiple streams to filter the logs and base 1 condition/notification on it 🙂  
a.|Message count condition (whenever the stream received more than X messages in the last Y minutes)  
b.|Field aggregation condition (on a numeric field for perf alerting)|  
c.|Field content condition (the stream received at least one message that has a field set to a given value)|

Not sure yet if this is the right way to do it or if you can compose multiple conditions…

Did you achieve your goal since your post ?

Please share your feedback.

Thanks,

Guilaume