# search guard and elastalert

**URL:** <https://forum.search-guard.com/t/search-guard-and-elastalert/216>\
**Category:** Search Guard\
**Created:** [June 30, 2016, 2:36am UTC](https://forum.search-guard.com/t/search-guard-and-elastalert/216 "2016-06-30T02:36:43Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Wei\_Hong](https://avatars.discourse-cdn.com/v4/letter/w/da6949/32.png) [@Wei\_Hong](https://forum.search-guard.com/u/Wei_Hong)\
**Post date:** [June 30, 2016, 2:36am UTC](https://forum.search-guard.com/t/search-guard-and-elastalert/216/1 "2016-06-30T02:36:43Z")

</div>

ElastAlert is a simple framework for alerting on anomalies, spikes, or other patterns of interest from data in Elasticsearch.

They also support HTTPS and basic auth(username + password) .

They just connect the elasticsearch from the port of elasticsearch.

So, could the search guard work with the elastalert??

Thank SG very much !

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [June 30, 2016, 6:39am UTC](https://forum.search-guard.com/t/search-guard-and-elastalert/216/2 "2016-06-30T06:39:03Z")

</div>

yes, should work (but not yet tried yet)

> **···**
>
> > Am 30.06.2016 um 04:36 schrieb Wei Hong \<fzuerhw@gmail.com\>:
> > 
> > ElastAlert is a simple framework for alerting on anomalies, spikes, or other patterns of interest from data in Elasticsearch.
> > 
> > They also support HTTPS and basic auth(username + password) .
> > 
> > They just connect the elasticsearch from the port of elasticsearch.
> > 
> > So, could the search guard work with the elastalert??
> > 
> > Thank SG very much !
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/a8d491a9-e880-4684-b4c1-0cfe2b82ef09%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/a8d491a9-e880-4684-b4c1-0cfe2b82ef09%40googlegroups.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).

---

<div class="post-metadata">

**Author:** ![Wei\_Hong](https://avatars.discourse-cdn.com/v4/letter/w/da6949/32.png) [@Wei\_Hong](https://forum.search-guard.com/u/Wei_Hong)\
**Post date:** [June 30, 2016, 11:04am UTC](https://forum.search-guard.com/t/search-guard-and-elastalert/216/3 "2016-06-30T11:04:35Z")

</div>

Can you tell me more about the way?The elastalert works by query the elasticsearh. However, as it queries the elasticsearch, How do they finish the authentication？？？

在 2016年6月30日星期四 UTC+8下午2:39:04，SG写道：

> **···**
>
> > yes, should work (but not yet tried yet)
> > 
> > > Am 30.06.2016 um 04:36 schrieb Wei Hong [fzu...@gmail.com](mailto:fzu...@gmail.com):
> > 
> > > ElastAlert is a simple framework for alerting on anomalies, spikes, or other patterns of interest from data in Elasticsearch.
> > 
> > > They also support HTTPS and basic auth(username + password) .
> > 
> > > They just connect the elasticsearch from the port of elasticsearch.
> > 
> > > 
> > 
> > > So, could the search guard work with the elastalert??
> > 
> > > Thank SG very much !
> > 
> > > –  
> > > You received this message because you are subscribed to the Google Groups “Search Guard” group.
> > 
> > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com).
> > 
> > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com).
> > 
> > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/a8d491a9-e880-4684-b4c1-0cfe2b82ef09%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/a8d491a9-e880-4684-b4c1-0cfe2b82ef09%40googlegroups.com).
> > 
> > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [July 6, 2016, 12:38pm UTC](https://forum.search-guard.com/t/search-guard-and-elastalert/216/4 "2016-07-06T12:38:04Z")

</div>

For elastalert support and doscu pls. look here:

- [ElastAlert - Easy & Flexible Alerting With Elasticsearch — ElastAlert 0.0.1 documentation](http://elastalert.readthedocs.io/en/latest/)  
- [GitHub - Yelp/elastalert: Easy & Flexible Alerting With ElasticSearch](https://github.com/Yelp/elastalert)

> **···**
>
> > Am 30.06.2016 um 13:04 schrieb Wei Hong \<fzuerhw@gmail.com\>:
> > 
> > Can you tell me more about the way?The elastalert works by query the elasticsearh. However, as it queries the elasticsearch, How do they finish the authentication？？？
> > 
> > 在 2016年6月30日星期四 UTC+8下午2:39:04，SG写道：  
> > yes, should work (but not yet tried yet)
> > 
> > \> Am 30.06.2016 um 04:36 schrieb Wei Hong \<fzu...@gmail.com\>:  
> > \>  
> > \> ElastAlert is a simple framework for alerting on anomalies, spikes, or other patterns of interest from data in Elasticsearch.  
> > \>  
> > \> They also support HTTPS and basic auth(username + password) .  
> > \>  
> > \> They just connect the elasticsearch from the port of elasticsearch.  
> > \>  
> > \> So, could the search guard work with the elastalert??  
> > \>  
> > \> Thank SG very much !  
> > \>  
> > \> --  
> > \> You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > \> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.  
> > \> To post to this group, send email to search...@googlegroups.com.  
> > \> To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/a8d491a9-e880-4684-b4c1-0cfe2b82ef09%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/a8d491a9-e880-4684-b4c1-0cfe2b82ef09%40googlegroups.com%5C).  
> > \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/5a0c1bea-5950-41a2-a6f8-78c9c21898bc%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/5a0c1bea-5950-41a2-a6f8-78c9c21898bc%40googlegroups.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).
