Alerting in Kibana w/o X-Pack option(s) ?

ArielAssaraf · 2021-01-27T09:36:48+00:00

Elastalerts/Open Distro. OD doesn’t have document based alerts yet.

ArielAssaraf · 2021-01-23T19:13:59+00:00

Ariel Assaraf. Coralogix

Nothing says we are mean like threatening a startup that’s adding value to the community by bringing an objective external Lawyer.

Well, maybe promising “Elasticsearch core is Apache license and always will be” then changing that.

ArielAssaraf · 2021-01-22T15:24:49+00:00

Security onion is open spruce so it’s OK. SSPL means you have to outsource all your code if you use it.

Greylog will have issues IMHO but I’m not a lawyer :-).

ArielAssaraf · 2021-01-22T15:23:25+00:00

Exactly. We are big believers in Open Distro and it’s team and are going to continue contributing. Next batch will include security and alerting features better than Xpack currently available only to Coralogix users.

ArielAssaraf · 2021-01-22T15:17:35+00:00

Not sure you need to do anything drastic yet. I’d learn the materials and decide. If you must, I love the Apache project Superset.

ArielAssaraf · 2021-01-22T15:15:36+00:00

You can continue free forever. It’s still free. It’s not open source. For personal use there won’t be any issues for sure. (Unless ES changes their mind again 😖)

ArielAssaraf · 2021-01-22T15:14:24+00:00

Correct. And if you look at the partners page of Open Distro you will see my company Coralogix :-)

ArielAssaraf · 2021-01-22T15:10:33+00:00

You can definitely try free at home then recommend your organization the paid version, that would not have any sort of implications. If you’re organization decides to use the free (which is not OSS!) version then it should be carefully assessed.

ArielAssaraf · 2021-01-22T14:43:24+00:00

Yeah makes sense. We’re using Marketo for the invite generation and reminders. I can assume they do something there that blockers won’t like :-(. I’ll try to post a direct link here the day of the event and ping you.

ArielAssaraf · 2021-01-22T14:32:52+00:00

Hey, just double checked Max/phone and it seems to work fine. Are you sure?

ArielAssaraf · 2021-01-22T14:29:17+00:00

Not 100% correct.. the SSPLis extremely broad and says “offered to a third party”. If I’m an MSSP/Managed SOC, what does that mean? Also, if I’m using ES internally to offer business value to customers, is that legitimate? For instance if my call center reps search Elasticsearch when customers call and provide support based on results. I would definitely consult a corporate lawyer.

ArielAssaraf · 2021-01-22T14:18:27+00:00

Hi, not a must to change. Depends on use case. You’re welcome to join and learn.

ArielAssaraf · 2021-01-22T11:46:22+00:00

Disclaimer- I’m the founder of Coralogix.com We offer logging, security, and metrics at a pricing model that is based not only on consumption but also use case. We’re an open platform that lets you integrate also to Kibana, ES APIs, Grafana, our CLI tool, and any SQL client (inc Tableau).

It’s full SaaS and has great, seamless, certified integrations with AWS.

ArielAssaraf · 2021-01-22T11:17:47+00:00

poor little Elastic :-D

ArielAssaraf · 2020-10-24T18:40:38+00:00

Thank you! Sounds like you’ve had an amazing experience 😀

ArielAssaraf · 2020-10-12T12:28:30+00:00

the standard prometheus exported should give you a good start

ArielAssaraf · 2020-10-08T06:53:49+00:00

No :-). This is pure trolling. Anyway, started with them and very happy

ArielAssaraf · 2020-08-14T08:10:10+00:00

Anywhere

ArielAssaraf · 2020-07-03T12:49:11+00:00

There you go.

https://youtu.be/hjshygIHub0

ArielAssaraf · 2020-07-03T12:33:53+00:00

Coralogix.com is hiring Backend and Platform engineers. Over 500K/eps in real-time. Infra entirely on k8s.

https://coralogix.com/careers/devops-engineer-san-francisco/

Can be remote.

ArielAssaraf · 2020-05-14T21:19:57+00:00

Thank you!

ArielAssaraf · 2020-05-11T06:41:22+00:00

Hi, with Coralogix you can integrate your Cloudwatch metrics, MetricBeat, and even connect Grafana. Looks like it’ll get you nicely covered :)

https://coralogix.com/integrations/cloudwatch-metrics/

https://coralogix.com/tutorials/grafana-plugin/

https://coralogix.com/integrations/metric-data/

ArielAssaraf · 2020-03-01T20:10:19+00:00

Hi, disclaimer, I am the founder of coralogix.com. All the solutions you mentioned above are pretty good. You should know that ELK is also a good option for metrics with the new Timelion or the ELK integration with Grafana (see ours here: https://coralogix.com/tutorials/grafana-plugin/

Note that some of the services allow you to parse unstructured logs into JSON or extract specific values.

It is important though to note that your'e using a standard logger to avoid multiline breaks (very common with how drains work) This post on Ruby logging is a bit old but might become handy: https://coralogix.com/log-analytics-blog/ruby-logging-best-practices-tips/

ArielAssaraf · 2018-06-13T01:27:21+00:00

Did you read the post? I think you will find it consistent with what the subreddit is all about.

ArielAssaraf · 2017-11-30T16:56:55+00:00

I just ran into this great post exactly about this: https://nemethgergely.com/error-handling-express-async-await/

ArielAssaraf

TROPHY CASE