tomwganem/docker-elastalert repository overview

⁠Elastalert Docker Image

Docker image with Elastalert built on an ubuntu image. Based off of ivankrizsan/elastalert. Modified to integrate better with a Mesos/Marathon environment.

Mount your rules at /opt/elastalert/rules and your config file at /opt/elastalert/config.yaml

⁠Environment Variables

What the container is started, it will try to connect to an elaticsearch instance using the below environment variables. It will create an elastalert index for you if it detects that you missing it.

• ELASTALERT_HOST - url for elasticsearch host. Default is http://elasticsearch⁠
• ELASTICSEARCH_PORT - port for elasticsearch host. Default is 9200
• ELASTICSEARCH_USERNAME - Set if your elasticsearch uses basic auth. Empty by Default.
• ELASTICSEARCH_PASSWORD - Set if your elasticsearch uses basic auth. Empty by default.

Other Environment Variables include:

• ELASTALERT_VERSION_CONSTRAINT - If you are using a version of elasticsearch that is not the latest, you should modify this so that you download to correct library when installing dependencies for building elastalert. Default is elasticsearch>=1.0.0,<1.7.2.
• SET_CONTAINER_TIMEZONE - Set to "true" (without quotes) to set the tiemzone when starting a container. Default is false.
• CONTAINER_TIMEZONE - Timezone to use in container. Default is America/Los_Angeles.