Elastalert cookbook

Overview

This chef cookbook is a fork of zbigniewz's elastalert-cookbook.
It installs and configures Yelp's elastalert.

In more details:
- checks out elastalert github repo using given commit hash or tag
- create elastalert user and group
- installs elastalert in python virtual environment
- creates elastalert index in Elasticsearch
- starts elastalert service with supervisor
- manages elastalert rules

Requirements

Platforms

• Debian 8

Cookbooks

• poise-python
• managed_directory
• supervisor

Other

• access to Elasticsearch cluster in version needed by particular version of elastalert (default 2.*)

How to use

Create wrapper around this cookbook and adjust attributes to your needs.

Attributes

• node['pip-elastalert']['version'] - elastalert version to install from pip, default nil meaning it will take the latest
• node['pip-elastalert']['elasticsearch']['hostname'] - hostname of elasticsearch to use, default localhost
• node['pip-elastalert']['elasticsearch']['port'] - port of elasticsearch to use, default 9200
• node['pip-elastalert']['elasticsearch']['index'] - name of index to be created by elastalert, default elastalert_status
• node['pip-elastalert']['elasticsearch']['index_old'] - old / previous elastalert index, default empty
• node['pip-elastalert']['elasticsearch']['url_prefix'] - prefix for Elasticsearch URl (see Elastalert docs), default empty
• node['pip-elastalert']['elasticsearch']['create_index_opts'] - additional options for creating elastalert index (see Elastalert docs), default --no-auth --no-ssl
• node['pip-elastalert']['group'] - name of group for user running elastalert, default elastalert
• node['pip-elastalert']['user'] - name of user running elastalert, default elastalert
• node['pip-elastalert']['user_home'] - home directory for user running elastalert, default /home/elastalert
• node['pip-elastalert']['directory'] - installation directory of elastalert, default /opt/elastalert
• node['pip-elastalert']['rules_directory'] - directory containing elastalert rules, default /opt/elastalert/rules
• node['pip-elastalert']['virtualenv']['directory'] - directory for python virtual environment running elastalert, default /opt/elastalert/.env
• node['pip-elastalert']['log_dir'] - logging directory for elastalert, default /var/log/elastalert
• node['pip-elastalert']['supervisor']['logfile'] - stdout log file path for supervisor, default /var/log/elastalert/elastalert_supervisord.log
• node['pip-elastalert']['supervisor']['logfile_maxbytes'] - max size of supervisor stdout log file, default 1MB
• node['pip-elastalert']['supervisor']['logfile_backups'] - no. of stdout log file backups, default 2
• node['pip-elastalert']['supervisor']['err_logfile'] - stderr log file path for supervisor, default /var/log/elastalert/elastalert_stderr.log
• node['pip-elastalert']['supervisor']['err_logfile_maxbytes'] - max size of supervisor stderr log file, default 5MB
• node['pip-elastalert']['supervisor']['run_command'] - supervisor run command starting elastalert (see Elastalert docs), default /opt/elastalert/.env/bin/elastalert --config /opt/elastalert/config.yml --verbose

Recipes

recipes/default.rb - does everything.

Testing

Tested with cookstyle, foodcritic, chefspec and kitchen tests using docker driver, build automatically
on Travis CI -> https://travis-ci.org/sleongkoan/elastalert-cookbook

Contributing

Fork repo and create pull request, all comments and feedback are welcome!