The Scenario
The on-call rotation handoff happened three days ago. Since then, two alerts fired from connectors nobody on the current rotation recognizes, and a runbook linked to a rule type that was apparently deprecated in the last Kibana upgrade.
The SRE lead sent a message this afternoon: she needs a reference sheet listing every alerting rule, its type, enabled status, schedule, and which connectors it's using — plus a second tab with all configured connectors and their types. The on-call team should be able to look up any firing rule in under thirty seconds.
The bad version:
- Open Kibana's Stack Management > Alerting, page through the rules list, and manually transcribe 80 entries.
- Switch to Connectors, do the same for however many are configured.
- Discover halfway through that three rules share a connector ID and you have to cross-reference to find the connector name.
- Build the two-tab sheet yourself, realize the connector IDs in the rules tab don't match the names in the connectors tab, and start over.
This sheet needs to exist in two hours. It does not exist yet.
The Easy Way: One Prompt in SheetXAI
SheetXAI is an AI agent that lives inside your Google Sheet. It reaches Kibana's Alerting API, pulls the rules and connectors, and writes them into the sheet structure you define — including cross-referencing connector IDs to names if you ask.
Get all alerting rules from Kibana and write each rule's name, type, enabled status, schedule interval, and linked connector IDs to this sheet, sorted by rule type.
What You Get
- Column A: rule name
- Column B: rule type identifier
- Column C: enabled status (true/false)
- Column D: schedule interval (e.g., 5m, 1h)
- Column E: comma-separated connector IDs linked to the rule
- Rows sorted by rule type for easy scanning
What If the Data Is Not Quite Ready
You need connector names instead of IDs in the rules tab
Connector IDs aren't meaningful to an on-call engineer under pressure:
Get all alerting rules from Kibana and write their names, types, enabled status, and schedule intervals to this sheet. For each rule, look up the linked connector names (not IDs) from the connectors API and write the connector names to column E.
You want the connectors on a separate tab
The SRE lead asked for a two-tab document:
List all connectors configured in Kibana and paste their ID, name, connector type, and enabled status into a new sheet tab named 'Connectors', flagging any connector type that requires a gold or higher license in column E.
Some rules are disabled and need a note
The team wants to know at a glance which rules are off and shouldn't be:
List all Kibana alerting rules and write their names, types, enabled status, and schedule intervals to this sheet. In column F, add 'Check - Disabled' for any rule that is currently disabled and has a schedule interval of 5 minutes or less, since those are likely high-frequency monitors that shouldn't be off.
Build the complete runbook reference in one shot
Create two tabs in this workbook: one named 'Rules' with all Kibana alerting rules including name, type, enabled status, schedule interval, and linked connector names resolved from the connectors API; and one named 'Connectors' with all configured connectors including ID, name, type, enabled status, and a flag in column E if the connector type requires a paid license.
The pattern: building a multi-tab reference document in a single prompt rather than pulling each section separately.
Try It
Get the 7-day free trial of SheetXAI and open any sheet you're building for on-call documentation or incident runbooks, then ask it to pull your complete Kibana alerting configuration. You can also check out Inventory Kibana Fleet Agent Policies Into a Google Sheet or see the full Kibana integration guide.