graylog-deploy/alerts/alert2_conntrack_full.json

21 lines
684 B
JSON

{
"title": "CRITICAL: conntrack table full (packet loss)",
"description": "nf_conntrack table full on a server - active packet loss is happening right now",
"priority": 3,
"alert": true,
"config": {
"type": "aggregation-v1",
"query": "event_type:conntrack_table_full",
"streams": ["__SERVERS_STREAM_ID__"],
"group_by": [],
"series": [],
"conditions": {"expression": null},
"search_within_ms": 60000,
"execute_every_ms": 60000,
"event_limit": 100
},
"field_spec": {},
"key_spec": [],
"notification_settings": {"grace_period_ms": 300000, "backlog_size": 5},
"notifications": [{"notification_id": "__DISCORD_NOTIFICATION_ID__"}]
}