Skip to content

setting Elastalert  #3300

Open
Open

Description

@iuad1a65

Hi, I have a qyestion about Elastalert. I create new monitiring and I need create monitoring with dependencies. For example:

TIMEOUT_EXCEEDED,5m>100
or
ExecutionTime = [^0]+"])>=10

how I can do this ?

This article https://elastalert2.readthedocs.io/en/latest/recipes/writing_filters.html or other
dont say about rbles for : > < or = "numbers"

Activity

  1. iuad1a65 commented on Jun 27, 2024

    @iuad1a65
    Author

    blok
    range
    For ranges on fields:

    filter:

    • range:
      status_code:
      from: 500
      to: 599

      dont work, get it - https://elastalert2.readthedocs.io/en/latest/recipes/writing_filters.html
      
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions