elastalert agregation

slack_alert_x.yaml

name: slack_alert_x

type: any

buffer_time:
  minutes: 30

index: api_x*

doc_type: api_x
  
bucket_interval:
  minutes: 30
  
sync_bucket_interval: true

max_threshold: 0.999

metric_agg_key: time_callback
metric_agg_type: avg
query_key: apiname

filter:
  - query:
      query_string:
        query: "apiname:\"awesomex\""
  - range:
      time_spent:
        from: 0.9
        to: 300

realert:
  hours: 1
  
alert:
  - slack

alert_subject: "performance issue"
slack_webhook_url:
  - https://hooks.slack.com/services/zzzzzzzzzzzzzzzzzzzzzzzzzzzz/zzzzzzzzzzzzzzzzzzzzz