setting Elastalert
Author: iuad1a65Created Jun 27, 2024Updated Jun 27, 2024
Hi, I have a qyestion about Elastalert. I create new monitiring and I need create monitoring with dependencies. For example:
TIMEOUT_EXCEEDED,5m>100 or ExecutionTime = [^0]+"])>=10
how I can do this ?
This article https://elastalert2.readthedocs.io/en/latest/recipes/writing_filters.html or other dont say about rbles for : > < or = "numbers"
Source: YelpArchive/elastalert