Logs Alarms - Notifications

[zolthar-z (Luis Zabala)]

Hi

Currently I have the typical filebeat->logtash->elasticsearch set up, I received the logs without a problem but now I need to send an e-mail or message in slack y there are some keywords in the logs message or if there is a new entry in the log file

I googled but found that the alert module is depreciated, so I was wondering if maybe one of you how to do this.

Thanks.

regards

[rugenl (Len Rugen)]

Elastic has alerts and watcher, but I think it takes at least a Gold license. Kibana doc. Some places it's called "watcher", other places it's alerting.

There is a git project elastalert

I wanted some alerts integrated with our existing monitoring package (Zabbix). I've created some croned python elastic queries to pass data values to Zabbix.