aboutsummaryrefslogtreecommitdiffstats
path: root/tools/lma/ansible-server/roles/logging/files/elastalert/ealert-rule-cm.yaml
blob: af28b6f60fb5f53f60f3ac532c78fc354762385a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
# Copyright 2020 Adarsh yadav
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
apiVersion: v1
kind: ConfigMap
metadata:
  name: elastalert-rule
data:
  rule-node4-vswitch.yaml: |
    name: vswitch-3-sec
    type: any
    index: node4*
    filter:
    - range:
        time_vswitchd:
          gt: 3    #Greater than

    realert:
      minutes: 0

    alert: post
    http_post_url: "http://10.10.120.211:31000/alerts"
    http_post_static_payload:
      type: threshold
      label: vswitchd start time > 3 sec
    http_post_payload:
       index: _index
       log: msg
       log_path: log_path
       time_vswitchd: time_vswitchd
       num_hits: num_hits
       num_matches: num_matches

  rule-node1-vswitch.yaml: |
    name: vswitch-3-sec
    type: any
    index: node1*
    filter:
    - range:
        time_vswitchd:
          gt: 3    #Greater than

    realert:
      minutes: 0

    alert: post
    http_post_url: "http://10.10.120.211:31000/alerts"
    http_post_static_payload:
      type: threshold
      label: vswitchd start time > 3 sec
    http_post_payload:
       index: _index
       log: msg
       log_path: log_path
       time_vswitchd: time_vswitchd
       num_hits: num_hits
       num_matches: num_matches

  rule-node4-blacklist.yaml: |
      name: error-finder-node4
      type: blacklist
      compare_key: alert
      index: node4*
      blacklist:
        - "Failed to run test"
        - "Failed to execute in '30' seconds"
        - "('Result', 'Failed')"
        - "could not open socket: connection refused"
        - "Input/output error"
        - "dpdk|ERR|EAL: Error - exiting with code: 1"
        - "Failed to execute in '30' seconds"
        - "dpdk|ERR|EAL: Driver cannot attach the device"
        - "dpdk|EMER|Cannot create lock on"
        - "device not found"

      realert:
        minutes: 0

      alert: post
      http_post_url: "http://10.10.120.211:31000/alerts"
      http_post_static_payload:
        type: pattern-match
        label: failed
      http_post_payload:
         index: _index
         log: msg
         log_path: log_path
         reason: alert
         num_hits: num_hits
         num_matches: num_matches
  rule-node1-blacklist.yaml: |
      name: error-finder-node1
      type: blacklist
      compare_key: alert
      index: node1*
      blacklist:
        - "Failed to run test"
        - "Failed to execute in '30' seconds"
        - "('Result', 'Failed')"
        - "could not open socket: connection refused"
        - "Input/output error"
        - "dpdk|ERR|EAL: Error - exiting with code: 1"
        - "Failed to execute in '30' seconds"
        - "dpdk|ERR|EAL: Driver cannot attach the device"
        - "dpdk|EMER|Cannot create lock on"
        - "device not found"

      realert:
        minutes: 0

      alert: post
      http_post_url: "http://10.10.120.211:31000/alerts"
      http_post_static_payload:
        type: pattern-match
        label: failed
      http_post_payload:
         index: _index
         log: msg
         log_path: log_path
         reason: alert
         num_hits: num_hits
         num_matches: num_matches