HiveBrain v1.2.0
Get Started
← Back to all entries
patternMinor

Alarms management with Elasticsearch and Kibana

Submitted by: @import:stackexchange-devops··
0
Viewed 0 times
withandalarmsmanagementelasticsearchkibana

Problem

I'm working on my first implementation of the Elasticsearch-Logstash-Kibana stack. I have everything working, but now I need to:

  • Set alarms on certain thresholds/events



  • Send notifications on alarms



  • (desirable) Manage alarms from within Kibana (i.e. alert/acknowledge)



I've read some partial solutions using another tools beside ELK, as Nagios, but I'm wondering what is the industry's "best" approach to this need.

Note: I've already taken a look at X-Pack and seems to be one of the acceptable solutions, but the licencing details and costs are still vague - not publicly available. I've contacted Elastic but need to answer a few questions with data I still don't have.

Solution

I have no experience with it myself, but Elastalert (http://elastalert.readthedocs.io/en/latest/elastalert.html) sounds like what you need (for the alarms/threshold part)

But besides that, it sounds like your interested in monitoring. In my opinion ELK is not a classic monitoring tool (more: data collection, data processing and data visualization). You should take a look at Icinga2 (https://www.icinga.com/products/icinga-2/) which can can be configured highly dynamical and is compatible with nagios plugins

Context

StackExchange DevOps Q#1188, answer score: 7

Revisions (0)

No revisions yet.