Files
deprecated-helm-charts/stable/elastalert
KUOKA Yusukeandk8s-ci-robot 4c485ef5f9 [stable/elastalert] Fix verbose/confusing index names on Elasticsearch 6.x (#5912)
* [stable/elastalert] Fix verbose/confusing index names on Elasticsearch 6.x

I had to set the writeback index to just `elastalert` in order to prevent elastalert to create verbose or confusing indices/types named like `elastalert_status_status/elastalert_status`, `elastalert_status_silence/elastalert_silence`, `elaststatus_status/elastalert`. The `_status` suffixes are redundant.

For more context, see the elastalert issue https://github.com/Yelp/elastalert/pull/1488 which was fixed via https://github.com/Yelp/elastalert/commit/c250100b7be07c68a53789569a86f87193ec37f4

* fix(elastalert): Bump chart version
2018-08-08 11:43:30 -07:00
..
2017-11-23 20:59:45 +01:00

Elastalert Helm Chart

elastalert is a simple framework for alerting on anomalies, spikes, or other patterns of interest from data in Elasticsearch.

TL;DR;

For ES 5.x:

$ helm install stable/elastalert

For ES 6.x:

$ helm install stable/elastalert --set writebackIndex=elastalert

# Open Dev Tools on Kibana and send the below.
# Otherwise elastalert ends up with errors like "RequestError: TransportError(400, u'search_phase_execution_exception', u'No mapping found for [alert_time] in order to sort on')"
PUT /elastalert/_mapping/elastalert
{
  "properties": {
      "alert_time": {"type": "date"}
  }
}

See the comment in the default values.yaml to know why writebackIndex is required for ES 6.x.

Installing the Chart

To install the chart with the release name my-release:

$ helm install --name my-release stable/elastalert

The command deploys elastalert on the Kubernetes cluster in the default configuration. The configuration section lists the parameters that can be configured during installation.

Uninstalling the Chart

To uninstall/delete the my-release deployment:

$ helm delete my-release

The command removes all the Kubernetes components associated with the chart and deletes the release.

Configuration

Parameter Description Default
image.repository docker image jertel/elastalert-docker
image.tag docker image tag 0.1.33
image.pullPolicy image pull policy IfNotPresent
command command override for container NULL
args args override for container NULL
replicaCount number of replicas to run 1
elasticsearch.host elasticsearch endpoint to use elasticsearch
elasticsearch.port elasticsearch port to use 80
elasticsearch.useSsl whether or not to connect to es_host using SSL False
resources Container resource requests and limits {}
rules Rule and alert configuration for Elastalert {} example shown in values.yaml
runIntervalMins Default interval between alert checks, in minutes 1
bufferTimeMins Default rule buffer time, in minutes 15
writebackIndex Name or prefix of elastalert index(es) elastalert_status