Fargate + ECR で elastalertを構築

JAWS-UG コンテナ支部 #14 でLTした時のスライドです。

Transcript

1. Fargate + ECR Ͱ elastalertΛߏங JAWS-UG ίϯςφࢧ෦ #14 ΍ͬͨΜ
   
2. Service
3. Ͱ΋ϒϩοΫνΣʔϯपΓͷ ࿩͸Ұ੾ͳ͍Ͱ͢! (͢Έ·ͤΜ)
4. Q. Elasticsearchͷ؂ࢹɺ Ͳ͏͍ͯ͠·͔͢ʁ
   
5. elastalert • YelpͷOSS • elastalertͷํͰ͋Β͔͡ΊϧʔϧΛܾΊɺ elasticsearchʹରͯ͠ΫΤϦΛ౤͛ͯΞϥʔ τΛඈ͹͢
   
7. elastalertͷDocker image • ࠓճɺ൒ެࣜ(?)ͷelastalertͷDocker image Λར༻ • REST API΋༻ҙ͞Ε͍ͯΔ
8. ΞʔΩςΫνϟ
   
9. elastalertઃఆ&Slack௨஌ྫ rules.yaml(ઃఆ) name: status200-moniroting type: frequency index: elastalert* num_events: 10 timeframe: minutes: 5 filter: - term: response: 200 alert: - slack SlackҎ֎ʹ΋ Amazon SNS, ϝʔϧͳͲ࢖͑Δ
10. ྑ͔ͬͨͱ͜Ζ • elastalert͔Βslack௨஌͕༰қ • FargateΛબ୒ͨ͠ͷͰอकൣғ͕ݮͬͨ • elastalertͷࢮ׆؂ࢹΛMackerelʹ೚ͤΒΕΔ
    
11. ඍົͩͬͨͱ͜Ζ • elastalertͷϧʔϧઃఆ͕೉͠Ί • ϧʔϧͷ؅ཧํ๏͸ߟ͑Δඞཁ͕͋Δ • ݱ࣌఺Ͱ͸ϧʔϧͷ௥Ճɾߋ৽ͷ౓ʹECRͷ σϓϩΠ͠௚͠
    
12. ͓ΘΓ