These are chat archives for Yelp/elastalert

14th
Apr 2016
alishakawaguchi
@alishakawaguchi
Apr 14 2016 21:36
Hi. I am trying to run a frequency rule and I have set the timeframe to 15 minutes. However elastalert run_every is set to 5 minutes. So when it runs the query I expected it to query the 15 minute window however is only queries a 5 minute window. So I looked through the code and saw that it is setting starttime using this line from the set_starttime function in elastalert.py -> rule['starttime'] = rule.get('previous_endtime', endtime - self.run_every). Shouldn't this line use timeframe and not self.run_every or am I setting the rule up wrong?
alishakawaguchi
@alishakawaguchi
Apr 14 2016 21:57
I should also mention that this is set -> use_count_query: true