History

kev 6016ee4b05 add elastichq		2019-11-01 09:14:24 +08:00
..
data	add elastichq	2019-11-01 09:14:24 +08:00
Dockerfile	update elastalert	2019-10-30 18:57:53 +08:00
README.md	update elastalert	2019-10-30 23:40:46 +08:00
docker-compose.yml	update elastalert	2019-10-30 23:40:46 +08:00

README.md

ElastAlert

ElastAlert is a simple framework for alerting on anomalies, spikes, or other patterns of interest from data in Elasticsearch.

up and running

$ docker-compose run --rm elastalert sh
>>> curl -X DELETE http://elasticsearch:9200/elastalert_*
>>> elastalert-create-index --config config.yaml
>>> elastalert-test-rule --config config.yaml --alert rules/example.yaml
>>> exit

$ docker-compose up -d

$ docker-compose logs -tf
Attaching to elastalert_elastalert_1
elastalert_1  | 2019-10-30T13:53:46.193793451Z bad things happen
elastalert_1  | 2019-10-30T13:58:45.855636764Z bad things happen
elastalert_1  | 2019-10-30T14:03:46.444137134Z bad things happen

ElastAlert will also load new rules, stop running missing rules, and restart modified rules as the files in this folder change.