Hello Joshua ,

Percolater is the usual choice here.
You can register queries against poercolator and when you index some feed ,
the peorcolater informs you that such a search query matches against your
index.
This information is passed when indexing.

With logstash , I am not sure how this can be done.

Thanks
             Vineeth


On Sat, May 31, 2014 at 8:31 AM, Joshua Hall <[email protected]>
wrote:

> I am working on a demo using Elasticsearch, Logstash, Kibana and one of
> the key features that I am looking for is the ability to setup alerts to
> send out emails.
>
> Specifically I want to setup an alert to be emailed when a log is recorded
> with "severity=error" and "category=category1" occurs more than 20 times in
> 15 minutes.
>
> I am limited to a windows only solution so that may limit some things.
>
> I have considered the following approaches
>
>    1. An app/service that simply does a search to get the number of
>    results every minute or so
>    2. Doing something with logstash
>    3. Doing something with Percolator (Logstash or an app)
>
> I really don't understand the percolator so I am not sure if it is even a
> viable approach for what doing this.
>
> Is there any guide / general guidance for doing something similar to this?
>
> --
> You received this message because you are subscribed to the Google Groups
> "elasticsearch" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/elasticsearch/82b6748d-0de9-4de0-92f3-65fcaeb69d3d%40googlegroups.com
> <https://groups.google.com/d/msgid/elasticsearch/82b6748d-0de9-4de0-92f3-65fcaeb69d3d%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/CAGdPd5%3D3dP5FcLHDevgZeOmYsAhvReUAQPLm1Nh_651a0Kjt1Q%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to