Yelp / elastalert

Easy & Flexible Alerting With ElasticSearch
https://elastalert.readthedocs.org
Apache License 2.0
7.97k stars 1.74k forks source link

New term optimisation #3290

Closed ajaywk7 closed 10 months ago

ajaywk7 commented 10 months ago

-> Removed Refresh Interval - as it could interfere with the threshold feature -> Threshold : Whenever a new term occurs, a event window is created for the same and when the count for the window reaches threshold, an alert is triggered. Once an alert is triggered for a term, it is considered as an existing or old term. -> Threshold_duration: window duration to store the count of new terms for, when ever new count is appended to the window, the counts added before this duration is decremented.