Email alert with Logstash -

-

i have configured elk stack (logstash, elastic search , and kibana)and have custom log file below.

05/august/2015:16:55:10 : www.****.com : statuscode = 200 : time in seconds load = 0.734 05/august/2015:16:55:11 : ****.my : statuscode = 403 : time in seconds load = 0.340 05/august/2015:17:00:01 : www. ****.mx : statuscode = 200 : time in seconds load = 2.282 05/august/2015:17:00:03 : www. ****.my : statuscode = 200 : time in seconds load = 2.663 05/august/2015:17:00:06 : www. ****.co.id : statuscode = 200 : time in seconds load = 1.455 05/august/2015:17:00:08 : ****. ****.my : statuscode = 200 : time in seconds load = 1.684

i have configured log succesfully on logstash , displaying in kibana. want configure email alert if of above website in logs shows 504 or 403 status code more 5 count continously. know need add filter matching pattern of log file. custom log, i’m unable it.

the best way write own script, did in python.

the following needed:

  • the script scheduled , search inside elasticsearch result.
  • once result found trigger reaction.
  • if have monitoring system, can send trigger system have 1 centralized interface.
  • if want email can use python send email result including number of errors found, server name , other information debug problem.
  • if run script every 10 minutes should in elasticsearch database events in past 10 minutes, if run once hour should data past hour.
  • you can use cron scheduling script need find way monitor in case of failing, use rundeck , sends me email if 1 of jobs fails.

i know might seem complex if using logstash infrastructure worth writing script , easy adjust different searches once written.

another option might wait watcher plugin elastic, post on site planning add gui interface once official ga release out, don't know when happen might better solution, though more limited working python.


Comments

Post a Comment

Popular posts from this blog

python - pip install -U PySide error -

-
does know how avoid following error when running pip install -u pyside per official website instructions here: https://pypi.python.org/pypi/pyside/#installing-pyside-on-a-mac-os-x-system note have done brew install qt successfully. you using pip version 7.0.3, version 7.1.2 available. should consider upgrading via 'pip install --upgrade pip' command. collecting pyside using cached pyside-1.2.4.tar.gz installing collected packages: pyside running setup.py install pyside complete output command /applications/anaconda/bin/python -c "import setuptools, tokenize;__file__='/private/var/folders/dy/ttgqhqqx3g9bsbsnqnxsk2z80000gq/t/pip-build-cpxemt/pyside/setup.py';exec(compile(getattr(tokenize, 'open', open)(__file__).read().replace('\r\n', '\n'), __file__, 'exec'))" install --record /var/folders/dy/ttgqhqqx3g9bsbsnqnxsk2z80000gq/t/pip-0r7hri-record/install-record.txt --single-version-externally-managed --compile:
Read more

arrays - C++ error: a brace-enclosed initializer is not allowed here before ‘{’ token -

-
simple question: i'm trying initialize array within c++ class declaration: using namespace std; #include <string> class myclass{ public: string myarray[] = {"a","b","c"}; }; and i'm getting error: error: brace-enclosed initializer not allowed here before ‘{’ token no, without complied c++11 compiler, cannot initialize member array in declaration. have initialize array member in constructor. , don't use open array if know number of elements initialize array.
Read more

cytoscape.js - How to add nodes to Dagre layout with Cytoscape -

-
i trying add nodes dagre graph through cityscape.js. problem nodes not painted. code have: cy.add({ group: "nodes", data: { id:"n0",name:"n0",weight: 75 }, }); $.ajax(url).done(function(jsontree){ var newnodes=[]; for(var i=1;i<6;i++){ //var child = jsontree.result[i]; newnodes.push( { group: "nodes", data: { id: "n"+i, name:"n"+i}}, { group: "edges", data: { id: "e"+i, source: "n0", target: "n"+i } } ); } cy.add(newnodes); any ideas? have used loaded function reload graph not work. not know if have use specific function reload graph. thank in advance. you need add positions new nodes. cytoscape.js docs : it important note positions of newly added nodes must defined when calling cy.add(). nodes can not placed in graph without valid position — otherwise not displayed. yo
Read more