2018-08-01 10:03:18 +02:00
|
|
|
ElastAlert
|
|
|
|
|
==========
|
|
|
|
|
|
2019-07-17 05:56:47 +02:00
|
|
|
[ElastAlert][1] is a simple framework for alerting on anomalies, spikes, or other
|
|
|
|
|
patterns of interest from data in Elasticsearch.
|
|
|
|
|
|
|
|
|
|
## up and running
|
2018-08-01 10:03:18 +02:00
|
|
|
|
|
|
|
|
```bash
|
|
|
|
|
$ docker-compose up -d
|
|
|
|
|
$ docker-compose exec elastalert sh
|
|
|
|
|
>>> cd /opt/elastalert/rules
|
2019-10-30 10:11:49 +02:00
|
|
|
>>> elastalert-test-rule example.yaml
|
2018-08-01 10:03:18 +02:00
|
|
|
>>> exit
|
|
|
|
|
```
|
2019-07-17 05:56:47 +02:00
|
|
|
|
|
|
|
|
> ElastAlert will also load new rules, stop running missing rules, and restart
|
|
|
|
|
> modified rules as the files in this folder change.
|
|
|
|
|
|
|
|
|
|
[1]: http://elastalert.readthedocs.io/en/latest/
|
