I have a query and the output is formatted using stats command, can we send the result to ITSI notable events.
You should be able to, as long as your stats command preserve the necessary fields (like _time, source, host,...) and the fields you use for the entity mapping.
