Kibana插件sentinl使用教程_kibana sentinl使用

         "schedule": {
             "later": "every 5 minutes"
         }
     },
     "disable": true,
     "report": false,
     "title": "watcher\_title"
 }

}

测试结果：  
 ![在这里插入图片描述](https://p3-xtjj-sign.byteimg.com/tos-cn-i-73owjymdk6/a8afda8eea3843b28ba324a6843dc6ba~tplv-73owjymdk6-jj-mark-v1:0:0:0:0:5o6Y6YeR5oqA5pyv56S-5Yy6IEAg55So5oi3MzIxMjA3NDIwNDUy:q75.awebp?rk3s=f64ab15b&x-expires=1771136045&x-signature=M1c9xveQ%2FD4FS29NcqKubJY2p5s%3D)  
 7.3 使用sentinl 执行多个watcher方案  
 ![在这里插入图片描述](https://p3-xtjj-sign.byteimg.com/tos-cn-i-73owjymdk6/f29a506910af4bb78893cec396d2abfb~tplv-73owjymdk6-jj-mark-v1:0:0:0:0:5o6Y6YeR5oqA5pyv56S-5Yy6IEAg55So5oi3MzIxMjA3NDIwNDUy:q75.awebp?rk3s=f64ab15b&x-expires=1771136045&x-signature=GWLE0U7YFquZNu3vULMd%2BSRD0cc%3D)  
 原理：将第一个watcher的结果写入es index 中，以供其他watcher使用（可以作为触发其他watcher方式）


7.3.1 新建第一个watcher,内容如下：

{ "actions": { "New console action txv1ad1yazr": { "throttle_period": "0h0m1s", "console": { "message": "{\n{{#payload.hits.hits}}\n"name":"{{_source.name}}",\n"age":{{_source.age}}\n{{/payload.hits.hits}}\n}" } }, "New webhook action 20wm9sojv9j": { "throttle_period": "0h0m1s", "webhook": { "method": "POST", "host": "10.16.232.163", , "proxy": false, "path": "/twoindex/doc", "body": "{\n{{#payload.hits.hits}}\n"name":"{{_source.name}}",\n"age":{{_source.age}}\n{{/payload.hits.hits}}\n}", "save_payload": false, "headers": { "content-type": "application/json" } } } }, "input": { "search": { "request": { "index": [ "trumantest" ], "body": { "query": { "match": { " } } } } } }, "condition": { "script": { "script": "payload.hits.total > 0" } }, "transform": {}, "trigger": { "schedule": { "later": "every 1 minutes" } }, "disable": false, "report": false, "title": "first_watcher" }

第一个watcher 主要是检测 trumantest是否含有"age": “19” 数据，如果有，将该结果写入twoindex 中。


7.3.2新建第二个watcher,主要检测index 数量，如果大于1，则在console 中输出

{ "actions": { "New console action 34fsgrz5dhd": { "throttle_period": "0h0m1s", "console": { "message": "this is a measage :{{payload.hits.total}}" } } }, "input": { "search": { "request": { "index": [ "twoindex" ], "body": { "query": { "match_all": {} } } } } }, "condition": { "script": { "script": "payload.hits.total > 1" } }, "transform": {}, "trigger": { "schedule": { "later": "every 1 minutes" } }, "disable": false, "report": false, "title": "two_watcher" }

7.3.3实验结果：


![在这里插入图片描述](https://p3-xtjj-sign.byteimg.com/tos-cn-i-73owjymdk6/075862b448f54e148e4be481a0804edc~tplv-73owjymdk6-jj-mark-v1:0:0:0:0:5o6Y6YeR5oqA5pyv56S-5Yy6IEAg55So5oi3MzIxMjA3NDIwNDUy:q75.awebp?rk3s=f64ab15b&x-expires=1771136045&x-signature=0MsZYRJa00Six3khOafENQGSdH4%3D)


参考链接：


https://www.bbsmax.com/A/gGdXbgXmJ4/


Kibana插件sentinl实现邮件报警(centos) : https://www.bbsmax.com/A/kPzO731wzx/