ELK notification system

Question

I have an ELK stack. I need to have a notification system that will request an elastic search for a specific request and trigger an email notification if it finds it. Can anyone suggest any such open source notification tool?

Answer 1

Elastic offers its own commercial system for this watcher .

If you want to notify about individual events, you can use the email output {} from the logstast.

, , , . script (, nagios ), .

.

Answer 2

elastalert:

https://github.com/Yelp/elastalert

( apache) :

", X- Y" ( )

• ", " ( )

• ", Y- X-" ( )

• ", / " ( )
• " , " ( )
• ", " ( )
• ", "( new_term)
• ", ( )