Fargate + ECR で elastalertを構築 - Speaker Deck

Fargate + ECR で elastalertを構築

by やったん

Speaker Deck

Tweet

Tweet

Slide 1

Slide 1 text

Fargate + ECR Ͱ elastalertΛߏங JAWS-UG ίϯςφࢧ෦ #14 ΍ͬͨΜ

Slide 2

Slide 2 text

Service

Slide 3

Slide 3 text

Ͱ΋ϒϩοΫνΣʔϯपΓͷ ࿩͸Ұ੾ͳ͍Ͱ͢! (͢Έ·ͤΜ)

Slide 4

Slide 4 text

Q. Elasticsearchͷ؂ࢹɺ Ͳ͏͍ͯ͠·͔͢ʁ

Slide 5

Slide 5 text

elastalert • YelpͷOSS • elastalertͷํͰ͋Β͔͡ΊϧʔϧΛܾΊɺ elasticsearchʹରͯ͠ΫΤϦΛ౤͛ͯΞϥʔ τΛඈ͹͢

Slide 6

Slide 6 text

No content

Slide 7

Slide 7 text

elastalertͷDocker image • ࠓճɺ൒ެࣜ(?)ͷelastalertͷDocker image Λར༻ • REST API΋༻ҙ͞Ε͍ͯΔ

Slide 8

Slide 8 text

ΞʔΩςΫνϟ

Slide 9

Slide 9 text

elastalertઃఆ&Slack௨஌ྫ rules.yaml(ઃఆ) name: status200-moniroting type: frequency index: elastalert* num_events: 10 timeframe: minutes: 5 filter: - term: response: 200 alert: - slack SlackҎ֎ʹ΋ Amazon SNS, ϝʔϧͳͲ࢖͑Δ

Slide 10

Slide 10 text

ྑ͔ͬͨͱ͜Ζ • elastalert͔Βslack௨஌͕༰қ • FargateΛબ୒ͨ͠ͷͰอकൣғ͕ݮͬͨ • elastalertͷࢮ׆؂ࢹΛMackerelʹ೚ͤΒΕΔ

Slide 11

Slide 11 text

ඍົͩͬͨͱ͜Ζ • elastalertͷϧʔϧઃఆ͕೉͠Ί • ϧʔϧͷ؅ཧํ๏͸ߟ͑Δඞཁ͕͋Δ • ݱ࣌఺Ͱ͸ϧʔϧͷ௥Ճɾߋ৽ͷ౓ʹECRͷ σϓϩΠ͠௚͠

Slide 12

Slide 12 text

͓ΘΓ