https://github.com/alerta/kibana-alerta

Log alerts to Elasticsearch and view them in Kibana
https://github.com/alerta/kibana-alerta

alerta kibana

Last synced: about 1 month ago
JSON representation

Log alerts to Elasticsearch and view them in Kibana

• Host: GitHub
• URL: https://github.com/alerta/kibana-alerta
• Owner: alerta
• License: mit
• Created: 2014-05-10T23:02:14.000Z (over 10 years ago)
• Default Branch: master
• Last Pushed: 2018-02-16T08:08:57.000Z (almost 7 years ago)
• Last Synced: 2024-05-21T04:15:39.132Z (7 months ago)
• Topics: alerta, kibana
• Homepage: http://alerta.io
• Size: 1.71 MB
• Stars: 28
• Watchers: 5
• Forks: 10
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
Alerta-to-Kibana

================

Forward Alerta alerts via Logstash to Elasticsearch for visualisation in Kibana.

![kibana](/docs/images/alerta-kibana3.png?raw=true)

Installation

------------

Install the following packages:

1. Logstash

2. Elasticsearch

3. Kibana

Configuration

-------------

Install the `logstash` plug-in which can be found in the [contrib repo](https://github.com/alerta/alerta-contrib/tree/master/plugins/logstash). Then add it to the list of enabled `PLUGINS`:

```

PLUGINS = ['reject','logstash']

LOGSTASH_HOST = 'localhost'

LOGSTASH_PORT = 1514

```

Configure `logstash` to parse json-encoded alerts and forward them to elasticsearch:

```

input {

    tcp {

        port  => 1514

        codec => json_lines

    }

}

output {

    # stdout {}

    elasticsearch {

        protocol => "http"

        host     => "localhost"

    }

}

```

Either configure a Kibana dashboard manually or load the example dashboard from this repo.

    Menu -> Load -> Advanced -> Choose File -> Dashboard.json

Testing

-------

Run `logstash` in debug mode:

    $ stop logstash

    $ /opt/logstash/bin/logstash agent -f /etc/logstash/conf.d/alerta.conf -vvv

To view alerts as they would be sent to elasticsearch uncomment the `stdout{}` line in the `logstash.conf` file above.

List elasticsearch indices:

    http://localhost:9200/_cat/indices?v

Vagrant

-------

Alternatively, make use of the [vagrant-try-alerta](https://github.com/alerta/vagrant-try-alerta) repo...

    $ git clone https://github.com/alerta/vagrant-try-alerta.git

    $ cd vagrant-try-alerta

    $ vagrant up alerta-kibana

    $ vagrant ssh alerta-kibana

License

-------

Copyright (c) 2014,2016 Nick Satterly. Available under the MIT License.