jertel / elastalert2

ElastAlert 2 is a continuation of the original yelp/elastalert project. Pull requests are appreciated!
https://elastalert2.readthedocs.org
Apache License 2.0
895 stars 282 forks source link

Support hourly index patterns #1328

Closed jmacdone closed 9 months ago

jmacdone commented 9 months ago

Description

Collect otherwise missing data for top_count_keys for those indexing hourly with a %H pattern, eg. logstash-%Y.%m.%d.%H Previously format_index() assumed daily was the most granular indexing.

See also https://github.com/jertel/elastalert2/discussions/1326

Checklist

Questions or Comments

test-docker

py311: OK (575.05=setup[483.55]+cmd[89.54,1.97] seconds) docs: OK (481.68=setup[466.33]+cmd[15.35] seconds) congratulations :) (1056.81 seconds)

jmacdone commented 9 months ago