Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to make cmd: python -m elastalert.elastalert --verbose --rule examples/rules/test_rule.yaml to run in background #3308

Open
sandraimmaculate opened this issue Jan 15, 2025 · 0 comments

Comments

@sandraimmaculate
Copy link

sandraimmaculate commented Jan 15, 2025

Hello,
I have installed the elastalert2. I have created a rule to trigger an alert when the sudo command is executed

index: .ds-logs-auditd.log-default-*
type: any

filter:
- term:
    process.executable: "/usr/bin/sudo"

alert:
- "email"

email:
- "[email protected]"

smtp_host: smtphost
smtp_port: 8025
smtp_auth_file: smtp_auth.yaml

realert:
  minutes: 0

Whenever i run the below command

python -m elastalert.elastalert --verbose --rule examples/rules/test_rule.yaml

I'm receiving the email alert as it have to run it in background right so that whenever the sudo command is executed i will be receiving the email alert.
if i created another rule how to run both of them!
Please Help!
Thanks in advance!

@sandraimmaculate sandraimmaculate changed the title My elastalert2 is not sending email alert! when the custom rule is triggered How to make cmd: python -m elastalert.elastalert --verbose --rule examples/rules/test_rule.yaml to run in background Jan 16, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant