阿里云日志服务SLS接入Alertmanager告警-云淘科技

Alertmanager配置

在Alertmanager配置文件的route配置项下添加一个receiver配置，然后在receivers配置项下配置通知渠道。配置内容模板如下：

route:
  receiver: '{RECIEVER_NAME}'
  ...
  
...

receivers:
- name: '{RECIEVER_NAME}'
  webhook_configs:
  - url: 'http://{ALIYUN_SLS_ENDPOINT}/event/webhook/RAMAK_{ACCESS_KEY_ID}/{WEBHOOK_APP_ID}'
  
- name: ...

Alertmanager告警消息解析

Alertmanager告警消息内容示例如下：

说明 如果alerts字段中包含多条告警消息（一组{}代表一条告警消息），则将映射为多条日志服务告警消息。

{
  "version": "4",
  "groupKey": "alertname,job",
  "truncatedAlerts": 0,
  "status": "firing",
  "receiver": "webhook",
  "groupLabels": {
    "alertname": "Alert",
    "job": "promethueus"
  },
  "commonLabels": {
    "instance": "localhost:9090"
  },
  "commonAnnotations": {},
  "externalURL": "http://example.com/#/alerts",
  "alerts": [
    {
      "annotations": {
        "description": "description info",
        "summary": "High request latency"
      },
      "endsAt": "2020-10-28T12:28:52.710Z",
      "startsAt": "2020-10-28T12:23:37.710Z",
      "generatorURL": "",
      "labels": {
        "alertname": "Alert",
        "instance": "localhost:9090",
        "job": "prometheus",
        "severity": "page"
      }
    },
    ...
  ]
}

字段映射

Alertmanager告警消息被接入到日志服务后，映射为日志服务告警内容。示例如下：

{
  "aliuid": "{开放告警应用所属的阿里云账号ID}",
  "alert_instance_id": "{自动生成}",
  "project": "{告警中心所属的Project}",
  "region": "{告警中心Project所在地域}",
  "alert_id": "Alert",
  "alert_type": "sls_pub",
  "alert_name": "Alert",
  "next_eval_interval": 0,
  "alert_time": 1603859020,
  "fire_time": 1603859017,
  "resolve_time": 0,
  "status": "firing",
  "labels": {
    "instance": "localhost:9090",
    "job": "prometheus"
  },
  "annotations": {
    "__pub_alert_region__": "{接收告警消息的网络接口对应的地域}",
    "__config_app__": "sls_pub_alert",
    "__pub_alert_service__": "{开放告警服务ID}",
    "__pub_alert_app__": "{开放告警应用ID}",
    "__pub_alert_protocol__": "alert_manager",
    "desc": "description info",
    "summary": "High request latency"
  },
  "severity": 2,
  "policy": {
    "alert_policy_id": "{开放告警应用中配置的告警策略}",
    "action_policy_id": "{开放告警应用中配置的行动策略}",
    "repeat_interval": "{开放告警应用中配置的重复等待时间}"
  },
...

日志服务告警内容与Alertmanager告警内容的映射关系如下：