Alerting on log level (Grafana, telegraf, tail)

Hi team, I’m using the telegraf tail plugin+GROK to ingest my custom application logs to Grafana. I can see the log data in the Table visualization, but I want to create an alert email that sends the log level + log message whenever log_level is “ERR”. I’ve set up the notifications channel, but I’m not sure how to create the alerting rule. Any help would be much appreciated.

have you looked at creating a multi-dimensional rule here?