<feature>support metadata && threshold

Author: lawlielt

alert/alert.go

@@ -4,6 +4,7 @@ package alert
 import (
 	"bytes"
 	"fmt"
+	"strconv"
 	"text/template"
 	"time"
 
@@ -27,11 +28,15 @@ type Alert struct {
 	Search      search.Dict       `yaml:"search"`
 	SearchQuery string            `yaml:"search_query"`
 	Process     luautil.LuaRunner `yaml:"process"`
+	ThrottlePeriodStr string      `yaml:"throttle_period"`
+	Metadata map[string]interface{}            `yaml:"metadata"`
 
 	Jobber         *jobber.FullTimeSpec
 	SearchIndexTPL *template.Template
 	SearchTypeTPL  *template.Template
 	SearchTPL      *template.Template
+	ThrottlePeriod uint
+	LastActionTime uint
 }
 
 func templatizeHelper(i interface{}, lastErr error) (*template.Template, error) {
@@ -73,10 +78,16 @@ func (a *Alert) Init() error {
 	}
 	a.Jobber = jb
 
+	a.LastActionTime = 0
+	a.ThrottlePeriod, err = parseThrottlePeriod(a.ThrottlePeriodStr)
+	if err != nil {
+		return err
+	}
+
 	return nil
 }
 
-func (a Alert) Run() {
+func (a *Alert) Run() {
 	kv := log.Fields{
 		"name": a.Name,
 	}
@@ -87,6 +98,7 @@ func (a Alert) Run() {
 		Name:      a.Name,
 		StartedTS: uint64(now.Unix()),
 		Time:      now,
+		Metadata:  a.Metadata,
 	}
 
 	searchIndex, searchType, searchQuery, err := a.CreateSearch(c)
@@ -139,6 +151,7 @@ func (a Alert) Run() {
 			return
 		}
 	}
+	a.LastActionTime = uint(now.Unix())
 }
 
 func (a Alert) CreateSearch(c context.Context) (string, string, interface{}, error) {
@@ -167,3 +180,23 @@ func (a Alert) CreateSearch(c context.Context) (string, string, interface{}, err
 
 	return searchIndex, searchType, search, nil
 }
+
+func parseThrottlePeriod(throttlePeriodStr string) (uint, error) {
+	var multi int
+	suffix := throttlePeriodStr[len(throttlePeriodStr)-1:]
+	switch suffix {
+	case "s":
+		multi = 1
+	case "m":
+		multi = 60
+	case "h":
+		multi = 3600
+	default:
+		return 0, fmt.Errorf("only support int[s,m,h], now is %s", throttlePeriodStr)
+	}
+	throttlePeriod, err := strconv.Atoi(throttlePeriodStr[:len(throttlePeriodStr)-1])
+	if err != nil {
+		return 0, err
+	}
+	return uint(throttlePeriod * multi), nil
+}

cmd/esalert/main.go

@@ -84,8 +84,9 @@ func main() {
 func alertSpin(a alert.Alert) {
 	for {
 		now := time.Now()
+		nowUnix := uint(now.Unix())
 		next := a.Jobber.Next(now)
-		if now == next {
+		if now == next && nowUnix - a.LastActionTime > a.ThrottlePeriod {
 			go a.Run()
 			time.Sleep(time.Second)
 		} else {

context/context.go

@@ -16,4 +16,5 @@ type Context struct {
 	StartedTS     uint64
 	search.Result `luautil:",inline"`
 	time.Time     `luautil:"-"`
+	Metadata      map[string]interface{}
 }

luautil/luautil.go

@@ -10,6 +10,7 @@ import (
 	"reflect"
 	"strconv"
 	"strings"
+	"text/template"
 
 	"esalert/config"
 	"esalert/context"
@@ -30,6 +31,15 @@ func (l *LuaRunner) Do(c context.Context) (interface{}, bool) {
 	if l.File != "" {
 		return RunFile(c, l.File)
 	} else if l.Inline != "" {
+		t, err := template.New("").Parse(l.Inline)
+		if err != nil {
+			return nil, false
+		}
+		buf := bytes.NewBuffer(make([]byte, 0, 1024))
+		if err := t.Execute(buf, c); err != nil {
+			return nil, false
+		}
+		l.Inline = buf.String()
 		return RunInline(c, l.Inline)
 	}
 	return nil, false