Graylog Alerting Question

you would work with the processing pipelines to get this work.

the when condition would check on the time of the day and then you write a field alert and in the actuall alert you just check on the existance of the field.