Jan Gosmann df6d71bad5 Make ElasticsearchNoNewDocuments alert more robust (#334) ... Use `elasticsearch_indices_indexing_index_total` instead of `elasticsearch_indices_docs` because `elasticsearch_indices_docs` might not update without an index refresh [1]. Refreshes happen every second by default, *but* only if there have been search requests within the last 30 seconds [2]. If there are no search requests for a sufficiently long duration, the alert based on `elasticsearch_indices_docs` will fire mistakenly. Apart from that, `elasticsearch_indices_docs` has the gauge metric type (while `elasticsearch_indices_indexing_index_total` is of the counter type) and the `increase` function is not intended to be used with gauges. Drops in the document count would be treated as a reset to 0, thus showing an increase by all remaining documents. [1]: https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-stats.html#index-stats-api-path-params [2]: https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-refresh.html		2023-01-30 17:06:40 +01:00
..
rules.yml	Make ElasticsearchNoNewDocuments alert more robust (#334)	2023-01-30 17:06:40 +01:00