elasticsearch - watcher based on two log events

Question

I started learning about writing watchers based on single event. but never written watcher based one two separate events that happen one after another. I looked for some inf