标签：hits wizard 告警 kibana watcher params query 日志 payload
1.下载相应版本的sentinl
wget https://github.com/sirensolutions/sentinl/releases/download/tag-6.6.1/sentinl-v6.6.1.zip
2.kiban集成安装插件
kibana-plugin install file:///home/cloud/software/sentinl-v6.6.1.zip
3.配置邮件
sentinl: settings: email: active: true user: l用户名 password: 邮箱客户端授权码 host: smtp.exmail.qq.com ssl: true port: 465 timeout: 10000
4.重启kibana
systemctl restart kibana
5.kibana设置
6.查看高级配置
{
"actions": {
"email_html_alarm_76b83c8f-0f4a-4db5-8a15-185933e17ca2": {
"name": "项目credit-manager日志告警",
"throttle_period": "2m",
"email_html": {
"stateless": false,
"subject": "项目credit-manager日志告警",
"priority": "medium",
"html": "<p>Hi {{watcher.username}}</p>\n<p>There are {{payload.hits.total}} results found by the watcher <i>{{watcher.title}}</i>.</p>\n\n<div style=\"color:grey;\">\n <hr />\n <p>This watcher sends alerts based on the following criteria:</p>\n <ul><li>{{watcher.wizard.chart_query_params.queryType}} of {{watcher.wizard.chart_query_params.over.type}} over the last {{watcher.wizard.chart_query_params.last.n}} {{watcher.wizard.chart_query_params.last.unit}} {{watcher.wizard.chart_query_params.threshold.direction}} {{watcher.wizard.chart_query_params.threshold.n}} in index {{watcher.wizard.chart_query_params.index}}</li></ul>\n</div>\n\n<div>\n异常信息如下:\n{{#payload.hits.hits}} {{_source.message}} \n \n \n{{/payload.hits.hits}} \n</div>",
"to": "w67307788@163.com",
"from": "lii@linccc.com"
}
},
"Webhook_f3303006-a643-42f6-a2ff-8d4066d18c3a": {
"name": "项目credit-manager日志告警",
"throttle_period": "2m",
"webhook": {
"priority": "medium",
"stateless": false,
"method": "POST",
"host": "oapi.dingtalk.com",
"port": "443",
"path": "/robot/send?access_token=token",
"body": "{\r\n \"msgtype\": \"markdown\",\r\n \"at\": {\r\n \"isAtAll\": \"True\"\r\n },\r\n \"markdown\": {\r\n \"title\": \"异常消息\",\r\n \"text\": \" credit-manager项目异常日志: \\n {{#payload.hits.hits}} {{_source.message}} \r\n \r\n{{/payload.hits.hits}}\"\r\n }\r\n}",
"params": {
"watcher": "{{watcher.title}}",
"payload_count": "{{payload.hits.total}}"
},
"headers": {
"Content-Type": "application/json"
},
"message": "credit-manager项目生产环境异常",
"use_https": true
}
}
},
"input": {
"search": {
"request": {
"index": [
"credit-manager-*"
],
"body": {
"query": {
"bool": {
"must": {
"match": {
"message": "ERROR"
}
},
"filter": {
"range": {
"@timestamp": {
"gte": "now-3m/m",
"lte": "now/m",
"format": "epoch_millis"
}
}
}
}
},
"size": 2,
"aggs": {
"dateAgg": {
"date_histogram": {
"field": "@timestamp",
"time_zone": "Asia/Shanghai",
"interval": "1m",
"min_doc_count": 1
}
}
}
}
}
}
},
"condition": {
"script": {
"script": "payload.hits.total >= 1"
}
},
"trigger": {
"schedule": {
"later": "every 1 minutes"
}
},
"disable": false,
"report": false,
"title": "credit-manager项目告警",
"wizard": {},
"save_payload": false,
"spy": false,
"impersonate": false
}测试：
标签：hits,wizard,告警,kibana,watcher,params,query,日志,payload 来源： https://blog.51cto.com/wsxxsl/2451325
本站声明： 1. iCode9 技术分享网（下文简称本站）提供的所有内容，仅供技术学习、探讨和分享； 2. 关于本站的所有留言、评论、转载及引用，纯属内容发起人的个人观点，与本站观点和立场无关； 3. 关于本站的所有言论和文字，纯属内容发起人的个人观点，与本站观点和立场无关； 4. 本站文章均是网友提供，不完全保证技术分享内容的完整性、准确性、时效性、风险性和版权归属；如您发现该文章侵犯了您的权益，可联系我们第一时间进行删除； 5. 本站为非盈利性的个人网站，所有内容不会用来进行牟利，也不会利用任何形式的广告来间接获益，纯粹是为了广大技术爱好者提供技术内容和技术思想的分享性交流网站。