{"action":"created","comment":{"url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/pulls/comments/155046946","pull_request_review_id":81301457,"id":155046946,"diff_hunk":"@@ -0,0 +1,44 @@\n+# Alert when the metric exceeds a threshold\n+\n+# (Required)\n+# Rule name, must be unique\n+name: api-cpu-load-rule\n+\n+# (Required)\n+# Type of alert.\n+# the metric_aggregation rule type alerts when metric_agg_key event values go above/below threshold\n+type: metric_aggregation\n+\n+# (Required)\n+# Index to search, wildcard supported\n+index: metricbeat-*\n+\n+# (Required, metric_aggregation specific)\n+# Alert when metric_agg_key values go over threshold\n+doc_type: metricsets\n+metric_agg_key: system.load.1\n+metric_agg_type: avg\n+max_threshold: 1.5\n+\n+# (Required)\n+# A list of Elasticsearch filters used for find events\n+# These filters are joined with AND and nested in a filtered query\n+# For more info: http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/query-dsl.html\n+filter:\n+- query:\n+    query_string:\n+      query: \"fields.app:(lopez AND api)\"","path":"elastalert/rules/api-cpu-load-rule.yml.tpl","position":30,"original_position":30,"commit_id":"dea884108ceede6cf52d2bde5163561eeede6b0c","original_commit_id":"c63a7ccc3d849e8194d8fd577bd0862420f0e9ba","user":{"login":"bradseefeld","id":305470,"avatar_url":"https://avatars3.githubusercontent.com/u/305470?v=4","gravatar_id":"","url":"https://api.github.com/users/bradseefeld","html_url":"https://github.com/bradseefeld","followers_url":"https://api.github.com/users/bradseefeld/followers","following_url":"https://api.github.com/users/bradseefeld/following{/other_user}","gists_url":"https://api.github.com/users/bradseefeld/gists{/gist_id}","starred_url":"https://api.github.com/users/bradseefeld/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bradseefeld/subscriptions","organizations_url":"https://api.github.com/users/bradseefeld/orgs","repos_url":"https://api.github.com/users/bradseefeld/repos","events_url":"https://api.github.com/users/bradseefeld/events{/privacy}","received_events_url":"https://api.github.com/users/bradseefeld/received_events","type":"User","site_admin":false},"body":"It looks like it: http://elastalert.readthedocs.io/en/latest/ruletypes.html#testing\r\n\r\n`--save-json` option maybe?","created_at":"2017-12-05T19:10:49Z","updated_at":"2017-12-05T19:10:49Z","html_url":"https://github.com/FlukeNetworks/elasticsearch-aws/pull/12#discussion_r155046946","pull_request_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/pulls/12","author_association":"COLLABORATOR","_links":{"self":{"href":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/pulls/comments/155046946"},"html":{"href":"https://github.com/FlukeNetworks/elasticsearch-aws/pull/12#discussion_r155046946"},"pull_request":{"href":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/pulls/12"}},"in_reply_to_id":154810101},"pull_request":{"url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/pulls/12","id":156333265,"html_url":"https://github.com/FlukeNetworks/elasticsearch-aws/pull/12","diff_url":"https://github.com/FlukeNetworks/elasticsearch-aws/pull/12.diff","patch_url":"https://github.com/FlukeNetworks/elasticsearch-aws/pull/12.patch","issue_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/issues/12","number":12,"state":"open","locked":false,"title":"LOP-4089 - elastalert","user":{"login":"jzhu9","id":5074764,"avatar_url":"https://avatars1.githubusercontent.com/u/5074764?v=4","gravatar_id":"","url":"https://api.github.com/users/jzhu9","html_url":"https://github.com/jzhu9","followers_url":"https://api.github.com/users/jzhu9/followers","following_url":"https://api.github.com/users/jzhu9/following{/other_user}","gists_url":"https://api.github.com/users/jzhu9/gists{/gist_id}","starred_url":"https://api.github.com/users/jzhu9/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jzhu9/subscriptions","organizations_url":"https://api.github.com/users/jzhu9/orgs","repos_url":"https://api.github.com/users/jzhu9/repos","events_url":"https://api.github.com/users/jzhu9/events{/privacy}","received_events_url":"https://api.github.com/users/jzhu9/received_events","type":"User","site_admin":false},"body":"Just for discussion for now...","created_at":"2017-12-04T23:22:22Z","updated_at":"2017-12-05T19:10:49Z","closed_at":null,"merged_at":null,"merge_commit_sha":"15bb72ac0dff9d23c4f8e206f4d9f1eb61d482e0","assignee":null,"assignees":[],"requested_reviewers":[],"milestone":null,"commits_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/pulls/12/commits","review_comments_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/pulls/12/comments","review_comment_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/pulls/comments{/number}","comments_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/issues/12/comments","statuses_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/statuses/dea884108ceede6cf52d2bde5163561eeede6b0c","head":{"label":"FlukeNetworks:LOP-4089","ref":"LOP-4089","sha":"dea884108ceede6cf52d2bde5163561eeede6b0c","user":{"login":"FlukeNetworks","id":11337364,"avatar_url":"https://avatars0.githubusercontent.com/u/11337364?v=4","gravatar_id":"","url":"https://api.github.com/users/FlukeNetworks","html_url":"https://github.com/FlukeNetworks","followers_url":"https://api.github.com/users/FlukeNetworks/followers","following_url":"https://api.github.com/users/FlukeNetworks/following{/other_user}","gists_url":"https://api.github.com/users/FlukeNetworks/gists{/gist_id}","starred_url":"https://api.github.com/users/FlukeNetworks/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/FlukeNetworks/subscriptions","organizations_url":"https://api.github.com/users/FlukeNetworks/orgs","repos_url":"https://api.github.com/users/FlukeNetworks/repos","events_url":"https://api.github.com/users/FlukeNetworks/events{/privacy}","received_events_url":"https://api.github.com/users/FlukeNetworks/received_events","type":"Organization","site_admin":false},"repo":{"id":55250257,"name":"elasticsearch-aws","full_name":"FlukeNetworks/elasticsearch-aws","owner":{"login":"FlukeNetworks","id":11337364,"avatar_url":"https://avatars0.githubusercontent.com/u/11337364?v=4","gravatar_id":"","url":"https://api.github.com/users/FlukeNetworks","html_url":"https://github.com/FlukeNetworks","followers_url":"https://api.github.com/users/FlukeNetworks/followers","following_url":"https://api.github.com/users/FlukeNetworks/following{/other_user}","gists_url":"https://api.github.com/users/FlukeNetworks/gists{/gist_id}","starred_url":"https://api.github.com/users/FlukeNetworks/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/FlukeNetworks/subscriptions","organizations_url":"https://api.github.com/users/FlukeNetworks/orgs","repos_url":"https://api.github.com/users/FlukeNetworks/repos","events_url":"https://api.github.com/users/FlukeNetworks/events{/privacy}","received_events_url":"https://api.github.com/users/FlukeNetworks/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/FlukeNetworks/elasticsearch-aws","description":null,"fork":false,"url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws","forks_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/forks","keys_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/keys{/key_id}","collaborators_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/teams","hooks_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/hooks","issue_events_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/issues/events{/number}","events_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/events","assignees_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/assignees{/user}","branches_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/branches{/branch}","tags_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/tags","blobs_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/git/refs{/sha}","trees_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/git/trees{/sha}","statuses_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/statuses/{sha}","languages_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/languages","stargazers_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/stargazers","contributors_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/contributors","subscribers_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/subscribers","subscription_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/subscription","commits_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/commits{/sha}","git_commits_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/git/commits{/sha}","comments_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/comments{/number}","issue_comment_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/issues/comments{/number}","contents_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/contents/{+path}","compare_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/compare/{base}...{head}","merges_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/merges","archive_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/downloads","issues_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/issues{/number}","pulls_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/pulls{/number}","milestones_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/milestones{/number}","notifications_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/labels{/name}","releases_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/releases{/id}","deployments_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/deployments","created_at":"2016-04-01T17:30:35Z","updated_at":"2016-04-01T21:21:37Z","pushed_at":"2017-12-05T19:02:32Z","git_url":"git://github.com/FlukeNetworks/elasticsearch-aws.git","ssh_url":"git@github.com:FlukeNetworks/elasticsearch-aws.git","clone_url":"https://github.com/FlukeNetworks/elasticsearch-aws.git","svn_url":"https://github.com/FlukeNetworks/elasticsearch-aws","homepage":null,"size":64,"stargazers_count":0,"watchers_count":0,"language":"Shell","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":1,"license":null,"forks":0,"open_issues":1,"watchers":0,"default_branch":"master"}},"base":{"label":"FlukeNetworks:master","ref":"master","sha":"64bd7af783d6020e53710030bfd96973f34659ac","user":{"login":"FlukeNetworks","id":11337364,"avatar_url":"https://avatars0.githubusercontent.com/u/11337364?v=4","gravatar_id":"","url":"https://api.github.com/users/FlukeNetworks","html_url":"https://github.com/FlukeNetworks","followers_url":"https://api.github.com/users/FlukeNetworks/followers","following_url":"https://api.github.com/users/FlukeNetworks/following{/other_user}","gists_url":"https://api.github.com/users/FlukeNetworks/gists{/gist_id}","starred_url":"https://api.github.com/users/FlukeNetworks/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/FlukeNetworks/subscriptions","organizations_url":"https://api.github.com/users/FlukeNetworks/orgs","repos_url":"https://api.github.com/users/FlukeNetworks/repos","events_url":"https://api.github.com/users/FlukeNetworks/events{/privacy}","received_events_url":"https://api.github.com/users/FlukeNetworks/received_events","type":"Organization","site_admin":false},"repo":{"id":55250257,"name":"elasticsearch-aws","full_name":"FlukeNetworks/elasticsearch-aws","owner":{"login":"FlukeNetworks","id":11337364,"avatar_url":"https://avatars0.githubusercontent.com/u/11337364?v=4","gravatar_id":"","url":"https://api.github.com/users/FlukeNetworks","html_url":"https://github.com/FlukeNetworks","followers_url":"https://api.github.com/users/FlukeNetworks/followers","following_url":"https://api.github.com/users/FlukeNetworks/following{/other_user}","gists_url":"https://api.github.com/users/FlukeNetworks/gists{/gist_id}","starred_url":"https://api.github.com/users/FlukeNetworks/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/FlukeNetworks/subscriptions","organizations_url":"https://api.github.com/users/FlukeNetworks/orgs","repos_url":"https://api.github.com/users/FlukeNetworks/repos","events_url":"https://api.github.com/users/FlukeNetworks/events{/privacy}","received_events_url":"https://api.github.com/users/FlukeNetworks/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/FlukeNetworks/elasticsearch-aws","description":null,"fork":false,"url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws","forks_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/forks","keys_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/keys{/key_id}","collaborators_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/teams","hooks_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/hooks","issue_events_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/issues/events{/number}","events_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/events","assignees_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/assignees{/user}","branches_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/branches{/branch}","tags_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/tags","blobs_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/git/refs{/sha}","trees_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/git/trees{/sha}","statuses_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/statuses/{sha}","languages_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/languages","stargazers_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/stargazers","contributors_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/contributors","subscribers_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/subscribers","subscription_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/subscription","commits_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/commits{/sha}","git_commits_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/git/commits{/sha}","comments_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/comments{/number}","issue_comment_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/issues/comments{/number}","contents_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/contents/{+path}","compare_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/compare/{base}...{head}","merges_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/merges","archive_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/downloads","issues_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/issues{/number}","pulls_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/pulls{/number}","milestones_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/milestones{/number}","notifications_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/labels{/name}","releases_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/releases{/id}","deployments_url":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/deployments","created_at":"2016-04-01T17:30:35Z","updated_at":"2016-04-01T21:21:37Z","pushed_at":"2017-12-05T19:02:32Z","git_url":"git://github.com/FlukeNetworks/elasticsearch-aws.git","ssh_url":"git@github.com:FlukeNetworks/elasticsearch-aws.git","clone_url":"https://github.com/FlukeNetworks/elasticsearch-aws.git","svn_url":"https://github.com/FlukeNetworks/elasticsearch-aws","homepage":null,"size":64,"stargazers_count":0,"watchers_count":0,"language":"Shell","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":1,"license":null,"forks":0,"open_issues":1,"watchers":0,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/pulls/12"},"html":{"href":"https://github.com/FlukeNetworks/elasticsearch-aws/pull/12"},"issue":{"href":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/issues/12"},"comments":{"href":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/issues/12/comments"},"review_comments":{"href":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/pulls/12/comments"},"review_comment":{"href":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/pulls/12/commits"},"statuses":{"href":"https://api.github.com/repos/FlukeNetworks/elasticsearch-aws/statuses/dea884108ceede6cf52d2bde5163561eeede6b0c"}},"author_association":"CONTRIBUTOR"}}
{"actor":{"display_login":"bradseefeld"}}