srolskyi/elastalert_docker repository overview

Docker image with Elastalert on Centos 7.

[volumes] /opt/logs - elastalert and supervisor logs. /opt/config - elastalert config.yaml and supervisor.conf. /opt/rules - elastalert rules.

Example_docker-compose.yml version: '3' services: elastalert_region_1: image: srolskyi/elastalert_docker
cap_add: - SYS_TIME - SYS_NICE volumes: - /opt/region_1/elastalert/config:/opt/config - /opt/region_1/elastalert/rules:/opt/rules - /opt/region_1/elastalert/logs:/opt/logs environment: - SET_CONTAINET_TIMEZONE=true - CONTAINER_TIMEZONE=Europe/Berlin - ELASTICSEARCH_HOST=my-elasticsearch.host - ELASTICSEARCH_PORT=9200 - ELASTALERT_INDEX=elastalert_status #your index name for elastalert

Example_supervisor_config:

[unix_http_server] file=/var/run/elastalert_supervisor.sock

[supervisord] logfile=/opt/logs/elastalert_supervisord.log logfile_maxbytes=1MB logfile_backups=2 loglevel=debug nodaemon=false directory=%(here)s

[rpcinterface:supervisor] supervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface

[supervisorctl] serverurl=unix:///var/run/elastalert_supervisor.sock

[program:elastalert] command=python -m elastalert.elastalert --config /opt/config/config.yaml --verbose process_name=elastalert autorestart=true startsecs=15 stopsignal=INT stopasgroup=true killasgroup=true stderr_logfile=/opt/logs/elastalert_stderr.log stderr_logfile_maxbytes=5MB

run on background: docker-compose up -d