oisis/elastalert repository overview

⁠Elastalert Docker

This repository contains Dockerfile of Elastalert⁠ and other scripts for Docker⁠'s.

⁠Base Docker Image

• python:2⁠

⁠Installation

1. Install Docker⁠.

2. Pull image from Docker hub(https://hub.docker.com/⁠):

docker pull oisis/elastalert

1. Alternatively build an image from Dockerfile⁠:

docker build -t oisis/elastalert .

⁠Usage

• Run with Graphite support:

docker run -d --name elastalert \
  -e ES_HOST=elasticsearch oisis/elastalert

⁠Supported variables:

• RULES_DIR: Folder that contains the rule yaml files
• RUN_EVERY: How often ElastAlert will query elasticsearch
• BUFFER_TIME: ElastAlert will buffer results from the most recent period of time
• ES_HOST: The elasticsearch hostname
• ES_PORT: The elasticsearch port
• ES_URL_PREFIX: URL prefix for elasticsearch
• USE_SSL: Connect with TLS to elasticsearch
• VERIFY_CERTS: Verify TLS certificates
• ES_SEND_GET_BODY_AS: GET request with body is the default option for Elasticsearch.
• WRITEBACK_INDEX: The index on es_host which is used for metadata storage