Kibana Alerts

SearchBlox 9.x uses Kibana 6.6 which supports Alerting feature. One can generate alerts when searching for a specific term or when the search count exceeds a certain predefined value etc. Steps for the same has been provided in the following:

Step 1: Go to Alerts

Click Alerting Tab from the left Menu

1358

Step 2: Create Monitor

Create Monitor by providing the name of the monitor, the frequency in which monitor has to run, whether visual graph is provided or an extraction query will be provided for monitoring and the Index (that is, the collection) for which the monitoring is being done. Collection indices that is, idx001 for collection no 1 and so on as well as SearchBlox internal indices such as querylogs can be provided as the index to be monitored. One can also add more than one index at a time.

1357

Defining Monitor using Visual graph

1290

Defining Monitor for extraction query
Sample extraction query

{
    "query": {
        "match": {
            "content": {
                "query": "world",
                "operator": "OR",
                "prefix_length": 0,
                "max_expansions": 50,
                "fuzzy_transpositions": true,
                "lenient": false,
                "zero_terms_query": "NONE",
                "auto_generate_synonyms_phrase_query": true,
                "boost": 1
            }
        }
    }
}
1325

Step 3: Create Destination

Add Destination on where the alert messages has to be posted

1345 1327 1213

Step 4: Create Trigger

create Trigger for the alerts

1290

Step 5: Configure Action

Configure Action for the trigger

1321

Step 6 : Check Monitor and Trigger

Check if the Monitor and triggers are set in Monitor page

1347 1348

Check the notification

Once the indexing starts if the count exceeds 10 there would be an alert triggered in slack as slack webhook has been provided in destination for alerts. Similarly, one can use other webhooks based on their preference.

1049

Alerts configured will also get displayed in Menu-> Alerts page of Kibana

1355