dummy config to play with - may be broken - may not be ... who really knows ...

riemann.config

; -*- mode: clojure; -*-
; vim: filetype=clojure

; (logging/init {:console false})
(logging/init :file "riemann.log")

; Listen on the local interface over TCP (5555), UDP (5555), and websockets
; (5556)
(let [host "0.0.0.0"]
  (tcp-server {:host host})
  (udp-server {:host host})
  (ws-server  {:host host}))

; Expire old events from the index every 60 seconds.
(periodically-expire 60)

(let [index (index)]
  ; Inbound events will be passed to these streams:
  (streams

    (default :ttl 60
      ; Index all events immediately.
      index

        ; (let [aggregate (rate 5 (with :service "dummy.time" index))])

        ; Log expired events.
        (expired
            (fn [event] (info "expired" event)))

        ; filter by service first
        (where
           (service "dummy.time")
            ; then aggregate
            ; this doesnt actually aggregate, it creates the percentils per service per host, rather than just per service
            ; might have to aggregate all data first, then calc the percentiles
            (by :service
              (percentiles 5 [0.50 0.75 0.90 0.99 0.999]
                    index
                    prn
              )

            )
        )
    )
  )
)