freedomofpress / ansible-role-elk

Installs a turnkey ELK stack for log aggregation and analysis, with optional Riemann support for alerting
18 stars 13 forks source link

Daily host metrics posted to Slack #36

Closed ageis closed 8 years ago

ageis commented 8 years ago

Assumes the Topbeat period is 60, so there will be an update within a minute after 12 noon.

Uses Ruby filter to handle typing and timing.

Replacing the message field makes the original Topbeat message hard to debug, so it's advisable to make a new field called alert_message and tell Riemann to use that. Requires updating the Riemann config.

conorsch commented 8 years ago

Merging.

Another example of how useful it would be to have templates rather than files here, since templates would allow a time other than noon to be substituted as a var.