mirror of
https://github.com/elastic/kibana.git
synced 2025-04-24 17:59:23 -04:00
# Backport This will backport the following commits from `main` to `8.x`: - [[OpenAPI][ResponseOps] Edit descriptions for alerting rule API examples (#194080)](https://github.com/elastic/kibana/pull/194080) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Lisa Cawley","email":"lcawley@elastic.co"},"sourceCommit":{"committedDate":"2024-09-27T16:45:44Z","message":"[OpenAPI][ResponseOps] Edit descriptions for alerting rule API examples (#194080)","sha":"539ad61d377f8982f3358b1a753be45408c4998c","branchLabelMapping":{"^v9.0.0$":"main","^v8.16.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Feature:Alerting","release_note:skip","v9.0.0","docs","v8.16.0","backport:version"],"title":"[OpenAPI][ResponseOps] Edit descriptions for alerting rule API examples","number":194080,"url":"https://github.com/elastic/kibana/pull/194080","mergeCommit":{"message":"[OpenAPI][ResponseOps] Edit descriptions for alerting rule API examples (#194080)","sha":"539ad61d377f8982f3358b1a753be45408c4998c"}},"sourceBranch":"main","suggestedTargetBranches":["8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/194080","number":194080,"mergeCommit":{"message":"[OpenAPI][ResponseOps] Edit descriptions for alerting rule API examples (#194080)","sha":"539ad61d377f8982f3358b1a753be45408c4998c"}},{"branch":"8.x","label":"v8.16.0","branchLabelMappingKey":"^v8.16.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Lisa Cawley <lcawley@elastic.co>
36 lines
No EOL
1 KiB
YAML
36 lines
No EOL
1 KiB
YAML
summary: Index threshold rule
|
|
description: >
|
|
Create an index threshold rule that uses a server log connector to send notifications when the threshold is met.
|
|
value:
|
|
actions:
|
|
- id: 48de3460-f401-11ed-9f8e-399c75a2deeb
|
|
frequency:
|
|
notify_when: onActionGroupChange
|
|
summary: false
|
|
group: threshold met
|
|
params:
|
|
level: info
|
|
message: "Rule '{{rule.name}}' is active for group '{{context.group}}':\n\n- Value: {{context.value}}\n- Conditions Met: {{context.conditions}} over {{rule.params.timeWindowSize}}{{rule.params.timeWindowUnit}}\n- Timestamp: {{context.date}}"
|
|
alert_delay:
|
|
active: 3
|
|
consumer: alerts
|
|
name: my rule
|
|
params:
|
|
aggType: avg
|
|
termSize: 6
|
|
thresholdComparator: ">"
|
|
timeWindowSize: 5
|
|
timeWindowUnit: m
|
|
groupBy: top
|
|
threshold:
|
|
- 1000
|
|
index:
|
|
- .test-index
|
|
timeField: "@timestamp"
|
|
aggField: sheet.version
|
|
termField: name.keyword
|
|
rule_type_id: .index-threshold
|
|
schedule:
|
|
interval: 1m
|
|
tags:
|
|
- cpu |