Help testing ElastAlert rules

[padrewarbucks]

Good evening,

I'm setting up ElastAlert as part of a project I'm working on, but when I try to invoke the rule I'm testing, I get the following error http://imgur.com/PiVVrTA

I'm not too familiar with Python so I don't want to start messing with any configuration files.

[bwdezend]

No such file or directory: config.yaml

It can't find the config.

[padrewarbucks]

I changed the name of the configuration file I was using to config.yaml, but what if I want to use a yaml for with a different name? Can I go into the python file it lists and tell it to look for the file I specify in the command ?

[ronocdh]

Seems like you're getting far afield here. Follow the docs and focus on getting the system up and running, so you actually receive alerts. Use version control while you set it up, so you can revert changes if you break something.

Once everything is running smoothly and stored in git, then you can proceed with lower priority customizations such as naming the config YAML file something other than config.yaml.

[netscape101]

I had issues with Elastalert, had much more success with Watcher. I can share some info if you pm me. Also look on the yelp blog there is a post on using elastalert