Too Long; Didn't Read
ElastAlert is a simple framework for alerting anomalies, spikes and other patterns from data in elasticsearch. It works by combining elasticsearch with two types of components, rule types and alerts. When a match occurs, it is given to one or more alerts, which take action based on the match. In built are — Jira,email, Google Chat, the Hive,Telegram, Slack… and the Hive. In the next part, we'll talk about configuring elasticsearch to elastalert and configuring built in type queries.