Skip to content

praeco job from praeco/0.0.1

Github source: d656714 or master branch

Properties

elastalert

alert_time_limit

the retry window for failed alerts.

Default
days: 2

buffer_time

the size of the query window, stretching backwards from the time each query is run.

Default
minutes: 15

es_host

the address of an Elasticsearch cluster where ElastAlert will store data about its state, queries run, alerts, and errors.

Default
localhost

es_port

the port corresponding to es_host.

Default
"9200"

rules

List of ElastAlert rules

Example
|+
  - name: Example rule
    type: frequency
    index: logstash-*
    num_events: 50
    timeframe:
        hours: 4
    filter:
    - term:
        some_field: "some_value"
    alert:
    - "email"
    email:
    - "[email protected]"

rules_folder

The name of the folder which contains rule configuration files.

Default
/var/vcap/jobs/elastalert/rules

run_every

how often ElastAlert will query Elasticsearch.

Default
minutes: 1

writeback_index

the name of the index in which ElastAlert will store data.

Default
elastalert_status

praeco

config_options

Additional options to append to BaseRule.config (YAML format).

external_url

xxx

slack_webhook_url

Slack URL for rules/BaseRule.config

Default
""

smtp_host

xxx

Default
""

smtp_port

xxx

Default
""

Templates

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/praeco/ directory (learn more).

  • bin/ctl (from bin/ctl)
  • bin/ctl_utils.sh (from bin/ctl_utils.sh)
  • bin/pre-start (from bin/pre-start.sh)
  • config/BaseRule.config (from config/BaseRule.config)
  • config/praeco.config.json (from config/praeco.config.json.erb)

Packages

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.