ElastAlert

ElastAlert: Open-Source Rules Engine for Alerting on Time Series Data

An open-source rules engine for alerting on anomalies, spikes, or other patterns of interest in time series data stored in Elasticsearch, enabling users to easily create monitors that will send notifications when user-defined conditions are met.

What is ElastAlert?

ElastAlert is an open-source Python rules engine designed for alerting on anomalies, spikes, or other patterns of interest in time series data stored in Elasticsearch. It provides an easy way to create and manage alerts for time series data without writing complex queries or scripts.

Some key features of ElastAlert include:

• Flexible rule configurations to detect anomalies, spikes, drops, new terms, cardiac anomalies, metric aggregation alarms, and more.
• Support for periodically running rules, running rules on a schedule, or at specific times.
• Multiple alerting channels including email, Slack, PagerDuty, Jira, and more.
• Easy integration with Elasticsearch data and query DSL.
• Handles failures and downtime with configurable retry and exponential backoff.
• Supports encryption via TLS to secure traffic to Elasticsearch.
• Modular construction allowing custom rule types, alerts, and enhancements.

ElastAlert makes it easy to monitor Elasticsearch metrics, events, and logs in near real-time. Its simple rules language and notifications integrations enable fast anomalies detection and alerting without extensive coding required. It provides valuable alerts for ops, security, and business teams. Active development helps it support the latest versions of Elasticsearch and Python.

ElastAlert Features

Official Links