Elasticsearch:Configure a custom alert policy

Procedure

1. Navigate to CloudMonitor.

   1. Log on to the Alibaba Cloud Elasticsearch console.

   2. In the top navigation bar, select the region where your Logstash cluster resides.

   3. In the left-side navigation pane, click Logstash Clusters.

   4. On the Logstash Clusters page, find your cluster and click its ID.

   5. In the left-side navigation pane, click Cluster Monitoring.

   6. In the Monitoring and Alerting Configuration section, click Go to CloudMonitor.

      The Create Alert Rule panel opens in the CloudMonitor console.

2. Configure the Alert Scope.

   In the Create Alert Rule panel, set the following parameters to target your Logstash cluster:

   Parameter	Value
   Product	Select Logstash from the drop-down list.
   Resource Range	Select Instances.
   Associated Resources	Select the Logstash cluster.

   Note: For parameters not listed in this table, retain the default values. For a full parameter reference, see Create an alert rule.

3. Configure the Alert Rule.

   1. In the Rule Description area, click Add Rule and select Combined Metrics.

      The Configure Rule Description panel opens.

   2. In the Alert Rule field, enter a descriptive name for this rule.

   3. Configure the following parameters:

      Parameter	Value
      Metric Type	Select Combined Metrics.
      Alert Level	Select Warning (Warn) from the drop-down list.
      Multi-metric Alert Condition	Specify multiple metrics.
      Relationship Between Metrics	Select Generate alerts if one of the conditions is met (||).
      Alert Threshold Triggers	Select 3 Consecutive Cycles (1 Cycle = 1 Minutes).

   4. Click Confirm to save the rule description and return to the Create Alert Rule panel.

4. Set Up Alert Notifications.

   1. In the Alert Contact Group field, select the alert contact group you created. CloudMonitor sends notifications to all contacts in the selected group when the alert fires.

   2. (Optional) To receive alert notifications at a custom endpoint, click Advanced Settings and enter a publicly accessible URL in the Alert Callback field. CloudMonitor pushes notifications to this URL through a POST request. Only HTTP requests are supported. For setup details, see Use the alert callback feature to send notifications about threshold-triggered alerts.

   3. Click Confirm to save the alert rule.

5. Verify the Configuration.

   After saving the alert rule, verify that monitoring is active and notifications are configured correctly.

   1. In the CloudMonitor console, confirm that the new alert rule appears in the alert rules list with the correct cluster association.

   2. To view Logstash cluster metrics, navigate to the dashboard:

      1. In the left-side navigation pane, choose Dashboard > Cloud Product Monitoring.

      2. In the upper-right corner, select Logstash from the drop-down list and select the region where the Logstash cluster resides.

      3. Select the Logstash cluster from the instance drop-down list and specify a time range to view the monitoring data of the cluster.

         

   Note: After the configuration is complete and the Logstash cluster enters a normal state, the system starts to monitor the cluster and displays monitoring data on the dashboard. When a metric exceeds its configured threshold for three consecutive cycles, CloudMonitor sends a notification to the alert contact group and, if configured, calls the alert callback URL.