阿里云日志服务SLS接入夜莺告警-云淘科技

夜莺配置

夜莺RC版本

1. 登录夜莺控制台。
2. 在左侧导航栏中，选择策略配置 > 告警策略。
3. 单击目标告警策略。目标告警策略相关的告警将接入日志服务告警系统。
4. 在通知配置区域，设置报警回调地址。设置报警回调为您在日志服务中创建开放告警服务和应用后生成的接口信息（完整URL）。如何获取，请参见获取接口信息。
5. 单击保存。

夜莺稳定版本

1. 登录夜莺控制台。
2. 在左侧导航栏中，选择告警管理 > 告警规则。
3. 单击目标告警规则。目标告警规则相关的告警将接入日志服务告警系统。
4. 在通知配置区域，设置报警回调地址。设置回调地址为您在日志服务中创建开放告警服务和应用后生成的接口信息（完整URL）。如何获取，请参见获取接口信息。
5. 单击编辑。

夜莺告警消息

夜莺RC版本

夜莺RC版本告警消息内容示例如下：

{
    "id": 2,
    "rule_id": 10,
    "rule_name": "我的测试",
    "rule_note": "my desc",
    "hash_id": "59453d81111111110c389673b9466",
    "is_prome_pull": 1,
    "last_sent": true,
    "alert_duration": 60,
    "res_classpaths": "",
    "res_ident": "",
    "priority": 2,
    "status": 0,
    "is_recovery": 1,
    "history_points": [
        {
            "metric": "system_cpu_util",
            "tags": {
                "ident": "192.0.2.0"
            },
            "points": [
                {
                    "t": 1629453245,
                    "v": 1.876676
                }
            ]
        }
    ],
    "trigger_time": 1629453245,
    "values": "[vector={__name__=\"system_cpu_util\", ident=\"192.0.2.0\"}]: [value=1.876676]",
    "notify_channels": "",
    "notify_groups": "",
    "notify_users": "",
    "runbook_url": "",
    "readable_expression": "system_cpu_util{} > 0",
    "tags": "ident=192.0.2.0",
    "notify_group_objs": null,
    "notify_user_objs": null,
    "tag_map": {
        "ident": "192.0.2.0"
    }
}

夜莺稳定版本

夜莺稳定版本告警消息内容示例如下：

{
    "id": 6,
    "cluster": "Default",
    "group_id": 1,
    "hash": "ee099d071732b9a7ef02be911b032ad5",
    "rule_id": 2,
    "rule_name": "test",
    "rule_note": "this is desc",
    "severity": 1,
    "prom_for_duration": 60,
    "prom_ql": "go_threads > 1",
    "prom_eval_interval": 15,
    "callbacks":
    [
        "http://127.0.0.1:80"
    ],
    "runbook_url": "",
    "notify_recovered": 1,
    "notify_channels":
    [],
    "notify_groups":
    [],
    "notify_groups_obj":
    [],
    "notify_repeat_next": 0,
    "target_ident": "",
    "target_note": "",
    "trigger_time": 1648555865,
    "trigger_value": "10",
    "tags":
    [
        "__name__=go_threads",
        "instance=localhost:9090",
        "job=prometheus",
        "name=wkb",
        "value=1"
    ],
    "is_recovered": false,
    "notify_users_obj":
    [],
    "last_eval_time": 1648555865,
    "last_sent_time": 1648555865
}

字段映射

夜莺RC版本

夜莺RC版本告警消息被接入到日志服务后，映射为日志服务告警内容。示例如下：

{
    "aliuid": "aliuid1",
    "alert_instance_id": "59453d81111111110c389673b9466",
    "alert_id": "10",
    "alert_type": "sls_pub",
    "alert_name": "我的测试",
    "region": "",
    "project": "sls-alert--",
    "project_id": 0,
    "next_eval_interval": 60,
    "alert_time": 0,
    "fire_time": 1629453245,
    "fire_results": null,
    "fire_results_count": 0,
    "resolve_time": 1630308759,
    "status": "resolved",
    "results": null,
    "labels": {
        "ident": "192.0.2.0"
    },
    "annotations": {
        "__config_app__": "sls_pub_alert",
        "__pub_alert_app__": "appid1",
        "__pub_alert_protocol__": "nightingale",
        "__pub_alert_region__": "e",
        "__pub_alert_service__": "serverid1",
        "desc": "my desc",
        "is_prome_pull": "1",
        "readable_expression": "system_cpu_util{} > 0",
        "title": "我的测试",
        "values": "[vector={__name__=\"system_cpu_util\", ident=\"192.0.2.0\"}]: [value=1.876676]"
    },
    "severity": 6,
    "policy": {
        "alert_policy_id": "",
        "action_policy_id": "",
        "use_default": false,
        "repeat_interval": "0s"
    },
    "drill_down_query": "http://127.0.0.1:8000/event/2"
}

日志服务告警消息内容与夜莺RC版本告警消息内容的映射关系如下：

夜莺稳定版本

夜莺稳定告警消息被接入到日志服务后，映射为日志服务告警内容。示例如下：

{
    "aliuid": "aliuid1",
    "alert_instance_id": "ee099d071732b9a7ef02be911b032ad5",
    "alert_id": "2",
    "alert_type": "sls_pub",
    "alert_name": "test",
    "region": "",
    "project": "",
    "project_id": 0,
    "next_eval_interval": 15,
    "alert_time": 1648889320,
    "fire_time": 1648555865,
    "fire_results": null,
    "fire_results_count": 0,
    "resolve_time": 0,
    "status": "firing",
    "results": null,
    "labels":
    {
        "__name__": "go_threads",
        "instance": "localhost:9090",
        "job": "prometheus",
        "name": "wkb",
        "value": "1"
    },
    "annotations":
    {
        "__config_app__": "sls_pub_alert",
        "__pub_alert_app__": "appid1",
        "__pub_alert_protocol__": "nightingale",
        "__pub_alert_region__": "e",
        "__pub_alert_service__": "serverid1",
        "cluster": "Default",
        "desc": "this is desc",
        "group_id": "1",
        "last_eval_time": "1648555865",
        "last_sent_time": "1648555865",
        "notify_recovered": "1",
        "notify_repeat_next": "0",
        "prom_for_duration": "60",
        "prom_ql": "go_threads > 1",
        "title": "test",
        "trigger_value": "10"
    },
    "severity": 6,
    "policy":
    {
        "alert_policy_id": "",
        "action_policy_id": "",
        "use_default": false,
        "repeat_interval": "0s"
    },
    "template": null,
    "drill_down_query": "http://127.0.0.1:18000/alert-cur-events/6"
}

日志服务告警属性与夜莺字段的映射关系如下：