Currently I have the typical filebeat->logtash->elasticsearch set up, I received the logs without a problem but now I need to send an e-mail or message in slack y there are some keywords in the logs message or if there is a new entry in the log file
I googled but found that the alert module is depreciated, so I was wondering if maybe one of you how to do this.
Elastic has alerts and watcher, but I think it takes at least a Gold license. Kibana doc. Some places it's called "watcher", other places it's alerting.
I wanted some alerts integrated with our existing monitoring package (Zabbix). I've created some croned python elastic queries to pass data values to Zabbix.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.