A simple framework for alerting on anomalies, spikes, or other patterns of interest from data in Elasticsearch.
it works by combining elasticsearch with two types of components, rule types and alerts. elasticsearch is periodically queried and the data is passed to the rule type, which determines when a match is found. when a match occurs, it is given to one or more alerts, which take action based on the match.
this is configured by a set of rules, each of which defines a query, a rule type, and a set of alerts.
self-hosted monitoring server-monitoring alerting