sudo apt install -y python-pip python-dev libffi-dev libssl-dev
sudo pip install -r requirements.txt
config.yaml:
es_host: elasticsearch 地址es_port: elasticsearch 端口
启用钉钉的报警，需添加必要的配置, 例如
alert:
- dingtalk
dingtalk_webhook: your-dingtalk-robot-webhook-url
dingtalk_msgtype: text
报警规则在rules目录中，可以随意的添加格式报警规则
elastalert-create-index --index elastalert_status --old-index
python -m elastalert.elastalert --verbose