/
td-agent.conf
129 lines (100 loc) · 2.39 KB
/
td-agent.conf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
<match changefinder.**>
@type copy
deep_copy true
<store>
@type norikra
norikra localhost:26571
remove_tag_prefix changefinder
target_map_tag true
</store>
<store>
@type record_reformer
renew_record true
renew_time_key time
tag datadog.${tag}
<record>
metric ${metric_outlier}
tag ${scope}
host ${host}
value ${score_outlier}
time ${record["time"]}
</record>
</store>
<store>
@type record_reformer
renew_record true
renew_time_key time
tag datadog.${tag}
<record>
metric ${metric_change}
tag ${scope}
host ${host}
value ${score_change}
time ${record["time"]}
</record>
</store>
</match>
<match replay.changefinder.**>
@type copy
deep_copy true
<store>
@type norikra
norikra localhost:26571
buffer_queue_limit 3
retry_limit 1
remove_tag_prefix replay.changefinder
target_map_tag true
</store>
</match>
<match datadog.changefinder.**>
@type dd
dd_api_key YOUR_DD_API_KEY
flush_interval 2s
queued_chunk_flush_interval 1s
try_flush_interval 0.1
num_threads 4
disable_retry_limit true
max_retry_wait 30s
</match>
<source>
type norikra
norikra localhost:26571
<fetch>
method event
target sample_anomaly
tag query_name
tag_prefix norikra.query.anomaly
interval 10s
</fetch>
<fetch>
method event
target sample_replay
tag query_name
tag_prefix norikra.query.replay
interval 10s
</fetch>
</source>
<match norikra.query.anomaly.**>
@type slack
flush_interval 10s
api_key YOUR_DD_API_KEY
app_key YOUR_DD_APP_KEY
webhook_url https://hooks.slack.com/services/XXX/XXX/XXX
channel dev-alerts-anomaly
username "Mr. ChangeFinder"
icon_emoji :ghost:
message_keys min_time,max_time,metric,raw,change,outlier
message ":clock1: [%s, %s]\n:house: %s\n:chart_with_upwards_trend: Max Raw %s, Max Change %s, Max Outlier %s"
</match>
<match norikra.query.replay.**>
@type slack
flush_interval 10s
api_key YOUR_DD_API_KEY
app_key YOUR_DD_APP_KEY
webhook_url https://hooks.slack.com/services/XXX/XXX/XXX
channel dev-alerts-anomaly
username "Mr. ChangeFinder (replay)"
icon_emoji :innocent:
message_keys min_time,max_time,metric,raw,change,outlier
message ":clock1: [%s, %s]\n:house: %s\n:chart_with_upwards_trend: Max Raw %s, Max Change %s, Max Outlier %s"
</match>