kibana plugin安装sentinl
./kibana-plugin install file:~/sentinl-v7.6.1.zip
Plugin sentinl [7.6.1] is incompatible with Kibana [7.9.0]
{ "actions": { "test-dingding": { "name": "waring_error_log_push_dingding", "throttle_period": "0h1m0s", "webhook": { "priority": "high", "stateless": false, "method": "POST", "host": "oapi.dingtalk.com", "port": "443", "path": "/robot/send?access_token=fxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx", "body": " {\"msgtype\": \"markdown\",\"markdown\": {\"title\":\"DEV_time.out\",\"text\": \"# Dev预警 \\t\\n ### 主机 | ```\\n{{payload.hits.hits.0._index}}\\n``` | \\t\\n ### Project | ```\\n{{payload.hits.hits.0._source.service}}\\n``` | \\t\\n ### 最近一分钟发生次数 | ```\\n{{payload.hits.total}}\\n``` | \\t\\n ### 告警内容:```\\n{{payload.hits.hits.0._source.message}}\\n``` \\t\\n \" } }", "params": { "watcher": "{{watcher.title}}", "payload_count": "{{payload.hits.total}}" }, "headers": { "Content-Type": "application/json" }, "auth": "钉钉账号:钉钉密码", "message": "业务功能告警", "use_https": true, "save_payload": false } } }, "input": { "search": { "request": { "index": [ "applog-*" ], "body": { "query": { "bool": { "must": [ { "query_string": { "analyze_wildcard": true, "query": "\"error\"" } }, { "range": { "@timestamp": { "gte": "now-1h", "lte": "now", "format": "epoch_millis" } } } ], "must_not": [] } } } } } }, "condition": { "script": { "script": "payload.hits.total >=1" } }, "transform": {}, "trigger": { "schedule": { "later": "every 20 minutes" } }, "disable": true, "report": false, "title": "警告和错误日志推送钉钉"}