kibana日志告警

1.下载相应版本的sentinl

  wget  https://github.com/sirensolutions/sentinl/releases/download/tag-6.6.1/sentinl-v6.6.1.zip

2.kiban集成安装插件

  kibana-plugin  install  file:///home/cloud/software/sentinl-v6.6.1.zip

3.配置邮件

sentinl:
  settings:
    email:
      active: true
      user: l用户名
      password: 邮箱客户端授权码
      host: smtp.exmail.qq.com
      ssl: true
      port: 465
      timeout: 10000

4.重启kibana

systemctl  restart  kibana

5.kibana设置

6.查看高级配置

{
  "actions": {
    "email_html_alarm_76b83c8f-0f4a-4db5-8a15-185933e17ca2": {
      "name": "项目credit-manager日志告警",
      "throttle_period": "2m",
      "email_html": {
        "stateless": false,
        "subject": "项目credit-manager日志告警",
        "priority": "medium",
        "html": "
Hi {{watcher.username}}
\n
There are {{payload.hits.total}} results found by the watcher {{watcher.title}}.
\n\n\n  \n  
This watcher sends alerts based on the following criteria:
\n  
{{watcher.wizard.chart_query_params.queryType}} of {{watcher.wizard.chart_query_params.over.type}} over the last {{watcher.wizard.chart_query_params.last.n}} {{watcher.wizard.chart_query_params.last.unit}} {{watcher.wizard.chart_query_params.threshold.direction}} {{watcher.wizard.chart_query_params.threshold.n}} in index {{watcher.wizard.chart_query_params.index}}
\n

\n\n

\n异常信息如下:\n{{#payload.hits.hits}} {{_source.message}} \n \n \n{{/payload.hits.hits}} \n

",         "to": "[email protected]",         "from": "[email protected]"       }     },     "Webhook_f3303006-a643-42f6-a2ff-8d4066d18c3a": {       "name": "项目credit-manager日志告警",       "throttle_period": "2m",       "webhook": {         "priority": "medium",         "stateless": false,         "method": "POST",         "host": "oapi.dingtalk.com",         "port": "443",         "path": "/robot/send?access_token=token",         "body": "{\r\n    \"msgtype\": \"markdown\",\r\n    \"at\": {\r\n        \"isAtAll\": \"True\"\r\n    },\r\n    \"markdown\": {\r\n        \"title\": \"异常消息\",\r\n        \"text\": \" credit-manager项目异常日志: \\n {{#payload.hits.hits}} {{_source.message}} \r\n \r\n{{/payload.hits.hits}}\"\r\n    }\r\n}",         "params": {           "watcher": "{{watcher.title}}",           "payload_count": "{{payload.hits.total}}"         },         "headers": {           "Content-Type": "application/json"         },         "message": "credit-manager项目生产环境异常",         "use_https": true       }     }   },   "input": {     "search": {       "request": {         "index": [           "credit-manager-*"         ],         "body": {           "query": {             "bool": {               "must": {                 "match": {                   "message": "ERROR"                 }               },               "filter": {                 "range": {                   "@timestamp": {                     "gte": "now-3m/m",                     "lte": "now/m",                     "format": "epoch_millis"                   }                 }               }             }           },           "size": 2,           "aggs": {             "dateAgg": {               "date_histogram": {                 "field": "@timestamp",                 "time_zone": "Asia/Shanghai",                 "interval": "1m",                 "min_doc_count": 1               }             }           }         }       }     }   },   "condition": {     "script": {       "script": "payload.hits.total >= 1"     }   },   "trigger": {     "schedule": {       "later": "every 1 minutes"     }   },   "disable": false,   "report": false,   "title": "credit-manager项目告警",   "wizard": {},   "save_payload": false,   "spy": false,   "impersonate": false }

测试：