Logs Alarms - Notifications


Currently I have the typical filebeat->logtash->elasticsearch set up, I received the logs without a problem but now I need to send an e-mail or message in slack y there are some keywords in the logs message or if there is a new entry in the log file

I googled but found that the alert module is depreciated, so I was wondering if maybe one of you how to do this.



Elastic has alerts and watcher, but I think it takes at least a Gold license. Kibana doc. Some places it's called "watcher", other places it's alerting.

There is a git project elastalert

I wanted some alerts integrated with our existing monitoring package (Zabbix). I've created some croned python elastic queries to pass data values to Zabbix.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.