noData.yaml

# Alert when no data has been received for more then 30 seconds.

# Rule name, must be unique
name: No Data Production

# Type of alert.
type: flatline

# Alert when this many documents matching the query occur within a timeframe
threshold: 1
use_terms: true

# num_events must occur within this amount of time to trigger an alert
timeframe:
  minutes: 30

realert: 
  minutes: 10
  
exponential_realert: 
  hours: 1
  
doc_type: doc

# Index to search, wildcard supported
index: logstash-*

alert_subject: "No data on dashboard"

alert_text_type: alert_text_only
alert_text: "The stack receives no data at Dockstore Production. It might be down :("

# The alert is use when a match is found
alert:
  - slack
slack_webhook_url: "{{SLACK_URL}}"
slack_username_override: "ElastAlert"