lscount returns a time bucketed count of matching documents in the LogStash index, according to the specified filter.
A trivial use of this would be to check how many documents in total have been received in the 5 minutes, and alert if it is below a certain threshold.
A Bosun alert for this might ...