3 ms·
It's a nice product, just be aware that it is purely event driven. So if you are trying to alert on no event then things get messy
by yahyaheee 10y ago
It's a nice product, just be aware that it is purely event driven. So if you are trying to alert on no event then things get messy
- Liuser 10y agoUnless I'm misunderstanding your comment, isn't that a flatline type of alert, which is supported by Elastalert?
- yahyaheee 10y agoNo that is just if a value drops off, but that rule will never fire unless an event occurs in elasticsearch matching that query. I found this out the hard way