Need an example for elastaler on free space?

Question

elasticsearch

Good day! Tell me if it is possible to organize a notification about free disk space less than, say, 20% with a bunch of Elasticsearch + elastaler. If so, where can I read

Answer 1

Working example

es_host: <ELASTIC IP>
es_port: 9200
# es_username: elastic
# es_password: changeme

name: ":warning:WARNING : Disk Usage Alert:warning:"
description: "running out of free disk space"
severity: "warning"

index: app-prod-metrics*

type: any

realert:
  minutes: 1

filter: 
- query:
    query_string:
      query: "system.filesystem.used.pct:[0.8 TO 0.9] AND system.filesystem.device_name: \"/dev/sda1\""
query_delay:
  minutes: 1
query_key: host
query_key: system.filesystem.used.pct
query_key: system.filesystem.device_name

alert_text_type: alert_text_only
include : ["host","system.filesystem.used.pct","system.filesystem.device_name"]

alert:
- "slack"
#-telegram
alert_text: "
*Used %*        : {0:.2%}\n
*Host*          : {1}\n
*Mount Point*   : {2}\n
*ElastAlert Node*  : elastalert on "
alert_text_type: alert_text_only
alert_text_args: ["system.filesystem.used.pct","host","system.filesystem.device_name"]

slack:
slack_webhook_url: "<SLACK URL>"

# telegram_bot_token: <TOKEN>
# telegram_room_id: "@<ROOM NAME>"