News for hackers. Stuff that matters.

A comment on Simple Alerting for the ELK Stack. Parent comment

Re:Simple Alerting for the ELK Stack by Liuser on Monday April 25, 2016 @03:20PM (#11566609)
Unless I'm misunderstanding your comment, isn't that a flatline type of alert, which is supported by Elastalert?
[ Parent | on HN ]
Re:Simple Alerting for the ELK Stack by yahyaheee on Monday April 25, 2016 @03:29PM (#11566676)
No that is just if a value drops off, but that rule will never fire unless an event occurs in elasticsearch matching that query. I found this out the hard way
[ Parent | on HN ]