Trigger based action using Elastic Agent

[allaboutopensource]

Describe the feature: I am looking how to use event handlers in elastic to take predefined actions when the hosts or services we are monitoring change state(stop/shutdown).

Event handlers are used to automate processes taken when there is a state change for a specific host or service. This is useful because it reduces the amount of manual work when something changes in your environment.

Describe a specific use case for the feature: we have setup an alert which gets trigger for some of the windows/linux services getting stopped for any reasons. Once we get the alerts is there any way that we can trigger an action(starting the service) based on the event (alert) on the host and start that particular service using the elastic agent on them.(could be script placed under elastic directory which can be actioned by Kibana/automatic)

[elasticmachine]

Pinging @elastic/actionable-observability (Team: Actionable Observability)

[fkanout]

@simianhacker, is it something we can help with or in our scope?

[elasticmachine]

Pinging @elastic/fleet (Team:Fleet)

[jen-huang]

@nimarezainia This is related to #124240

[nimarezainia]

@allaboutopensource we will be adding alerting capabilities to the Agent status and its inputs in future releases. You can take action on those alerts.

[allaboutopensource]

thanks for the update. looking forward to that release.