Fargate + ECR で elastalertを構築

Transcript

1. 1.

   Fargate + ECR Ͱ elastalertΛߏங JAWS-UG ίϯςφࢧ෦ #14 ΍ͬͨΜ
   

   
2. 2.

   Service

3. 3.

   Ͱ΋ϒϩοΫνΣʔϯपΓͷ ࿩͸Ұ੾ͳ͍Ͱ͢! (͢Έ·ͤΜ)

4. 4.

   Q. Elasticsearchͷ؂ࢹɺ Ͳ͏͍ͯ͠·͔͢ʁ
   

5. 5.

   elastalert • YelpͷOSS • elastalertͷํͰ͋Β͔͡ΊϧʔϧΛܾΊɺ elasticsearchʹରͯ͠ΫΤϦΛ౤͛ͯΞϥʔ τΛඈ͹͢
   

6. 6.

   None
7. 7.

   elastalertͷDocker image • ࠓճɺ൒ެࣜ(?)ͷelastalertͷDocker image Λར༻ • REST API΋༻ҙ͞Ε͍ͯΔ

8. 8.

   ΞʔΩςΫνϟ
   

9. 9.

   elastalertઃఆ&Slack௨஌ྫ rules.yaml(ઃఆ) name: status200-moniroting type: frequency index: elastalert* num_events: 10

   timeframe: minutes: 5 filter: - term: response: 200 alert: - slack SlackҎ֎ʹ΋ Amazon SNS, ϝʔϧͳͲ࢖͑Δ
10. 10.

    ྑ͔ͬͨͱ͜Ζ • elastalert͔Βslack௨஌͕༰қ • FargateΛબ୒ͨ͠ͷͰอकൣғ͕ݮͬͨ • elastalertͷࢮ׆؂ࢹΛMackerelʹ೚ͤΒΕΔ
    

11. 11.

    ඍົͩͬͨͱ͜Ζ • elastalertͷϧʔϧઃఆ͕೉͠Ί • ϧʔϧͷ؅ཧํ๏͸ߟ͑Δඞཁ͕͋Δ • ݱ࣌఺Ͱ͸ϧʔϧͷ௥Ճɾߋ৽ͷ౓ʹECRͷ σϓϩΠ͠௚͠
    

12. 12.

    ͓ΘΓ