opensearch-project · cwillum · Jul 21, 2023 · May 18, 2023 · May 20, 2023 · May 20, 2023
diff --git a/_includes/gif-pause.html b/_includes/gif-pause.html
@@ -0,0 +1,13 @@
+<head>
+    <link rel="stylesheet" type="text/css" href="{{ "/assets/css/gif.css" | relative_url }}">
+</head>
+<div class="object-and-details">
+    <img src="{{site.url}}{{site.baseurl}}/images/alerting/chained-findings.gif" alt="Animated: workflow for chained findings" width="90%">
+    <details>
+      <!-- added role=button to summary to resolve iOS funkiness -->
+      <summary role="button" aria-label="static image"></summary>
+     <div class="object-and-details1">
+        <img src="{{site.url}}{{site.baseurl}}/images/alerting/chained-findings.jpg" alt="Static: workflow for chained findings" width="90%">
+      </div>
+    </details>
+  </div>
diff --git a/_includes/gif-pause2.html b/_includes/gif-pause2.html
@@ -0,0 +1,13 @@
+<head>
+    <link rel="stylesheet" type="text/css" href="{{ "/assets/css/gif.css" | relative_url }}">
+</head>
+<div class="object-and-details">
+    <img src="{{site.url}}{{site.baseurl}}/images/alerting/chained-alerts.gif" alt="Animated: workflow for chained alerts" width="90%">
+    <details>
+      <!-- added role=button to summary to resolve iOS funkiness -->
+      <summary role="button" aria-label="static image"></summary>
+     <div class="object-and-details1">
+        <img src="{{site.url}}{{site.baseurl}}/images/alerting/chained-alerts.jpg" alt="Static: workflow for chained alerts" width="90%">
+      </div>
+    </details>
+  </div>
diff --git a/_observing-your-data/alerting/comp-monitors.md b/_observing-your-data/alerting/comp-monitors.md
@@ -18,11 +18,12 @@ redirect_from:
 
 ## Monitor types
 
-The OpenSearch Dashboard Alerting plugin provides four monitor types:
+The OpenSearch Dashboard Alerting plugin provides four basic monitor types, as well as a composite monitor that can utilize any or all monitor types:
 * **per query** – This monitor runs a query and generates alert notifications based on criteria that matches.
 * **per bucket** – This monitor runs a query that evaluates trigger criteria based on aggregated values in the dataset.
 * **per cluster metrics** – This monitor runs API requests on the cluster to monitor its health.
 * **per document** – This monitor runs a query (or multiple queries combined by a tag) that returns individual documents that match the alert notification trigger condition.
+* **composite monitor** — The composite monitor allows you to chain the execution of multiple monitors of different types into a single flow, where the analysis and findings of one monitor becomes the input or source data of the next monitor in the chain. See [Composite monitors]({{site.url}}{{site.baseurl}}/notifications-plugin/index) for information on creating and using these types of monitors.
 
 ## Key terms
 
@@ -35,7 +36,7 @@ Alert | An event associated with a trigger. When an alert is created, the trigge
 Action | The information that you want the monitor to send out after being triggered. Actions have a *destination*, a message subject, and a message body.
 Destination | A reusable location for an action. Supported locations are Amazon Chime, Email, Slack, or custom webhook.
 Finding | An entry for an individual document found by a per document monitor query that contains the document ID, index name, and timestamp. Findings are stored in the Findings index: `.opensearch-alerting-finding*`.
-Channel | A notification channel to use in an action. See [notifications]({{site.url}}{{site.baseurl}}/notifications-plugin/index) for more information.
+Channel | A notification channel to use in an action. See [notifications]({{site.url}}{{site.baseurl}}/observing-your-data/alerting/comp-monitors) for more information.
 
 ## Per document monitors
 
@@ -341,10 +342,11 @@ if (score > 99) {
 }
 ```
 
-Below are some variables you can include in your message using Mustache templates to see more information about your monitors.
 
 ### Available variables
 
+You can include the following variables in your message using Mustache templates to see more information about your monitors.
+
 #### Monitor variables
 
 Variable | Data type | Description

diff --git a/assets/css/gif.css b/assets/css/gif.css
@@ -0,0 +1,64 @@
+.object-and-details {
+    display: inline-block;
+    position: relative;
+  }
+
+  summary {
+    color: #fff;
+    background: #000;
+    width: 2rem;
+    height: 2rem;
+    position: absolute;
+    left: 82%;
+    top: 8%;
+    right: 0.5rem;
+    z-index: 2;
+    border-radius: 50%;
+    background-image: url("https://assets.codepen.io/128034/pause_circle_filled-24px.svg");
+    background-size: 90% auto;
+    background-repeat: no-repeat;
+    background-position: center;
+     background-color:white;
+  }
+
+  [open] summary {
+    background-image: url("https://assets.codepen.io/128034/play_circle_filled-24px.svg");
+    box-shadow: 0 0 0 2px #fff;
+    background-color:white;
+  }
+
+  /* for blink/webkit */
+  details summary::-webkit-details-marker 
+  { display:none; }
+  /* for firefox */
+  details > summary:first-of-type {
+  list-style:none}
+
+  summary + * {
+    position: absolute;
+    top: 0;
+    left: 0;
+    right: 0;
+    bottom: 0;
+    padding: 1rem;
+    padding-top: 3rem;
+    background: #fff;
+    color: #fff;
+    overflow-y: auto;
+  }
+
+  summary + * a {
+    color: #fff;
+  }
+  summary:focus {
+      box-shadow: 0 0 0 0.25rem #F5F7FA;
+    outline:transparent;
+  }
+
+  .object-and-details1 img {
+    display: inline-block;
+    position: absolute;
+    top:0px;
+    left:0px;
+    overflow: visible;
+  }
diff --git a/images/alerting/chained-alerts.gif b/images/alerting/chained-alerts.gif
diff --git a/images/alerting/chained-alerts.jpg b/images/alerting/chained-alerts.jpg
diff --git a/images/alerting/chained-findings.gif b/images/alerting/chained-findings.gif
diff --git a/images/alerting/chained-findings.jpg b/images/alerting/chained-findings.jpg