-
Notifications
You must be signed in to change notification settings - Fork 8.3k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'master' into dynamic_fields_mapping
- Loading branch information
Showing
455 changed files
with
11,237 additions
and
2,833 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,5 +1,30 @@ | ||
{ | ||
"upstream": "elastic/kibana", | ||
"branches": [{ "name": "7.x", "checked": true }, "7.7", "7.6", "7.5", "7.4", "7.3", "7.2", "7.1", "7.0", "6.8", "6.7", "6.6", "6.5", "6.4", "6.3", "6.2", "6.1", "6.0", "5.6"], | ||
"labels": ["backport"] | ||
"targetBranchChoices": [ | ||
{ "name": "master", "checked": true }, | ||
{ "name": "7.x", "checked": true }, | ||
"7.7", | ||
"7.6", | ||
"7.5", | ||
"7.4", | ||
"7.3", | ||
"7.2", | ||
"7.1", | ||
"7.0", | ||
"6.8", | ||
"6.7", | ||
"6.6", | ||
"6.5", | ||
"6.4", | ||
"6.3", | ||
"6.2", | ||
"6.1", | ||
"6.0", | ||
"5.6" | ||
], | ||
"targetPRLabels": ["backport"], | ||
"branchLabelMapping": { | ||
"^v7.8.0$": "7.x", | ||
"^v(\\d+).(\\d+).\\d+$": "$1.$2" | ||
} | ||
} |
Validating CODEOWNERS rules …
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,27 @@ | ||
[role="xpack"] | ||
[[xpack-logs-alerting]] | ||
== Logs alerting | ||
|
||
[float] | ||
=== Overview | ||
|
||
To use the alerting functionality you need to {kibana-ref}/alerting-getting-started.html#alerting-setup-prerequisites[set up alerting]. | ||
|
||
You can then select the *Create alert* option, from the *Alerts* actions dropdown. | ||
|
||
[role="screenshot"] | ||
image::logs/images/alert-actions-menu.png[Screenshot showing alerts menu] | ||
|
||
Within the alert flyout you can configure your logs alert: | ||
|
||
[role="screenshot"] | ||
image::logs/images/alert-flyout.png[Screenshot showing alerts flyout] | ||
|
||
[float] | ||
=== Fields and comparators | ||
|
||
The comparators available for conditions depend on the chosen field. The combinations available are: | ||
|
||
- Numeric fields: *more than*, *more than or equals*, *less than*, *less than or equals*, *equals*, and *does not equal*. | ||
- Aggregatable fields: *is* and *is not*. | ||
- Non-aggregatable fields: *matches*, *does not match*, *matches phrase*, *does not match phrase*. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,17 +1,30 @@ | ||
`xpack.infra.enabled`:: Set to `false` to disable the Logs and Metrics app plugin {kib}. Defaults to `true`. | ||
[cols="2*<"] | ||
|=== | ||
| `xpack.infra.enabled` | ||
| Set to `false` to disable the Logs and Metrics app plugin {kib}. Defaults to `true`. | ||
|
||
`xpack.infra.sources.default.logAlias`:: Index pattern for matching indices that contain log data. Defaults to `filebeat-*,kibana_sample_data_logs*`. To match multiple wildcard patterns, use a comma to separate the names, with no space after the comma. For example, `logstash-app1-*,default-logs-*`. | ||
| `xpack.infra.sources.default.logAlias` | ||
| Index pattern for matching indices that contain log data. Defaults to `filebeat-*,kibana_sample_data_logs*`. To match multiple wildcard patterns, use a comma to separate the names, with no space after the comma. For example, `logstash-app1-*,default-logs-*`. | ||
|
||
`xpack.infra.sources.default.metricAlias`:: Index pattern for matching indices that contain Metricbeat data. Defaults to `metricbeat-*`. To match multiple wildcard patterns, use a comma to separate the names, with no space after the comma. For example, `logstash-app1-*,default-logs-*`. | ||
| `xpack.infra.sources.default.metricAlias` | ||
| Index pattern for matching indices that contain Metricbeat data. Defaults to `metricbeat-*`. To match multiple wildcard patterns, use a comma to separate the names, with no space after the comma. For example, `logstash-app1-*,default-logs-*`. | ||
|
||
`xpack.infra.sources.default.fields.timestamp`:: Timestamp used to sort log entries. Defaults to `@timestamp`. | ||
| `xpack.infra.sources.default.fields.timestamp` | ||
| Timestamp used to sort log entries. Defaults to `@timestamp`. | ||
|
||
`xpack.infra.sources.default.fields.message`:: Fields used to display messages in the Logs app. Defaults to `['message', '@message']`. | ||
| `xpack.infra.sources.default.fields.message` | ||
| Fields used to display messages in the Logs app. Defaults to `['message', '@message']`. | ||
|
||
`xpack.infra.sources.default.fields.tiebreaker`:: Field used to break ties between two entries with the same timestamp. Defaults to `_doc`. | ||
| `xpack.infra.sources.default.fields.tiebreaker` | ||
| Field used to break ties between two entries with the same timestamp. Defaults to `_doc`. | ||
|
||
`xpack.infra.sources.default.fields.host`:: Field used to identify hosts. Defaults to `host.name`. | ||
| `xpack.infra.sources.default.fields.host` | ||
| Field used to identify hosts. Defaults to `host.name`. | ||
|
||
`xpack.infra.sources.default.fields.container`:: Field used to identify Docker containers. Defaults to `container.id`. | ||
| `xpack.infra.sources.default.fields.container` | ||
| Field used to identify Docker containers. Defaults to `container.id`. | ||
|
||
`xpack.infra.sources.default.fields.pod`:: Field used to identify Kubernetes pods. Defaults to `kubernetes.pod.uid`. | ||
| `xpack.infra.sources.default.fields.pod` | ||
| Field used to identify Kubernetes pods. Defaults to `kubernetes.pod.uid`. | ||
|
||
|=== |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.