Yelp / elastalert

Easy & Flexible Alerting With ElasticSearch
https://elastalert.readthedocs.org
Apache License 2.0
7.99k stars 1.73k forks source link

Using Elastalert to monitor disk thresholds #3173

Closed premierpsp closed 3 years ago

premierpsp commented 3 years ago

Hi, I'm setting disks thresholds alerts from metricbeat indexes. I have set the following alert and it's worked:

name: FS Alert type: metric_aggregation type : any index: metricbeat-* metric_agg_key: system.filesystem.used.pct metric_agg_type: avg query_key: host.name bucket_interval: minutes: 15 sync_bucket_interval: true max_threshold: 0.8 alert: slack realert: minutes: 0

But now I would like to generate an alarm indicating the name of the disk and its use. Example:

Critical: FS disk alert! Hostname: elasthub01 Disk name or Mount Poitnt: /u00 Available: 10GB Total: 100GB Used: 90GB or percentage 90%

Thank you guys!