LINE

Reach people on LINE when critical log patterns match. Add line to alert: with a channel access token and target user or group identifiers. Add line under alert: on your rule (you can combine destinations).

Start with Options when wiring credentials and endpoints—Full working example shows how they fit in a complete rule.

Options

Keys below match the ElastAlert 2 alerter. Shared rule fields such as alert_subject apply as described in Subject & body. Example fragments from the ElastAlert 2 reference appear indented under the option they illustrate (add your own name, type, index, and filter to make a full rule).

Required

  • line_channel_access_token — channel access token

Example usage

 alert:
   - "line"
 line_channel_access_token: "Your channel access token"
 line_to: "Your user id"
  • line_to — user id

Full working example

name: Example alert for LINE
type: any
index: "*-*"
filter:
  - query:
      query_string:
        query: "level:error OR log.level:error"
alert:
  - "line"
line_channel_access_token: "REPLACE"
line_to: "REPLACE_USER_ID"