Added configuration files

Author: manankalra

configurations/config.yaml

@@ -0,0 +1,12 @@
+rules_folder: my_rules
+run_every:
+    seconds: 10
+buffer_time:
+    seconds: 5
+es_host: localhost
+es_port: 9200
+#es_username: someusername
+#es_password: somepassword
+writeback_index: elastalert_status
+alert_time_limit:
+    days: 1

configurations/smtp_auth_file.yaml

@@ -0,0 +1,2 @@
+user: "<email-address>"
+password: "<password>"

configurations/zdaemon.conf

@@ -0,0 +1,5 @@
+<runner>
+  program python -m elastalert.elastalert --config config.yaml
+  socket-name /tmp/elastalert.zdsock
+  forever true
+</runner>

pre-requisites/requirements.txt

@@ -0,0 +1,18 @@
+aws-requests-auth>=0.3.0
+blist>=1.3.6
+boto3>=1.4.4
+configparser>=3.5.0
+croniter>=0.3.16
+elasticsearch>=5.0.0
+exotel>=0.1.3
+jira>=1.0.10
+jsonschema>=2.6.0
+mock>=2.0.0
+PyStaticConfiguration>=0.10.3
+python-dateutil>=2.6.0
+PyYAML>=3.12
+requests>=2.0.0
+simplejson>=3.10.0
+stomp.py>=4.1.17
+texttable>=0.8.8
+twilio==6.0.0

rules/elastalert_cpu_watch.yaml

@@ -0,0 +1,31 @@
+name: CPU Alert
+type: metric_aggregation
+index: metricbeat-*
+metric_agg_key: system.cpu.user.pct
+metric_agg_type: avg
+query_key: beat.hostname
+doc_type: metricsets
+bucket_interval:
+  seconds: 10
+sync_bucket_interval: true
+#min_threshold: 0.1
+max_threshold: 0.50
+filter:
+- term:
+    metricset.name: cpu
+alert:
+- debug
+- email
+- slack
+email: 
+- "<username>@<domainname>"
+###########################
+smtp_host: "smtp.gmail.com" #for google email addresses
+smtp_port: 465
+smtp_ssl: true
+###########################
+from_addr: "<username>@<domainname>"
+smtp_auth_file: "smtp_auth_file.yaml"
+slack_webhook_url: ""
+slack_channel_override: "#<channel-name>"
+slack_username_override: "@<user-name>"

rules/elastalert_filesystem_watch.yaml

@@ -0,0 +1,31 @@
+name: Filesystem Alert
+type: metric_aggregation
+index: metricbeat-*
+metric_agg_key: system.filesystem.used.pct
+metric_agg_type: avg
+query_key: beat.hostname
+doc_type: metricsets
+bucket_interval:
+  seconds: 10
+sync_bucket_interval: true
+#min_threshold: 0.1
+max_threshold: 0.50
+filter:
+- term:
+    metricset.name: filesystem
+alert:
+- debug
+- email
+- slack
+email: 
+- "<username>@<domainname>"
+###########################
+smtp_host: "smtp.gmail.com" #for google email addresses
+smtp_port: 465
+smtp_ssl: true
+###########################
+from_addr: "<username>@<domainname>"
+smtp_auth_file: "smtp_auth_file.yaml"
+slack_webhook_url: ""
+slack_channel_override: "#<channel-name>"
+slack_username_override: "@<user-name>"

rules/elastalert_memory_watch.yaml

@@ -0,0 +1,31 @@
+name: Memory Alert
+type: metric_aggregation
+index: metricbeat-*
+metric_agg_key: system.memory.actual.used.pct
+metric_agg_type: avg
+query_key: beat.hostname
+doc_type: metricsets
+bucket_interval:
+  seconds: 10  
+sync_bucket_interval: true
+#min_threshold: 0.1
+max_threshold: 0.50
+filter:
+- term:
+    metricset.name: memory
+alert:
+- debug
+- email
+- slack
+email: 
+- "<username>@<domainname>"
+###########################
+smtp_host: "smtp.gmail.com" #for google email addresses
+smtp_port: 465
+smtp_ssl: true
+###########################
+from_addr: "<username>@<domainname>"
+smtp_auth_file: "smtp_auth_file.yaml"
+slack_webhook_url: ""
+slack_channel_override: "#<channel-name>"
+slack_username_override: "@<user-name>"