# jertel/elastalert2

ElastAlert 2 is a continuation of the original yelp/elastalert project. Pull requests are appreciated!

Repository: https://github.com/jertel/elastalert2
Canonical: https://ross.abutalabs.com/products/elastalert2
Homepage: https://elastalert2.readthedocs.org
Language: Python
License: Apache-2.0
License Family: permissive
Last push: 2026-08-01T23:18:28+00:00

## Health v2 (maintenance only)
Score: 91/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 95, release rhythm 82, longevity 100
- inputs: {"age_days": 2192, "days_push": 32, "days_rel": 42, "gap_med": 62, "n_releases_24m": 14}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1130, forks 338 (observed 2026-08-28T04:03:42.377868+00:00)

## What it is
ElastAlert 2 is a standalone Python tool that runs rule-based alerting on anomalies, spikes, and patterns in data stored in Elasticsearch or OpenSearch. It is a maintained community continuation of Yelp's original ElastAlert, deployable via Docker or a Helm chart on Kubernetes.

## Use cases
- alert on error log spikes in elasticsearch
- get notified when a specific pattern appears in opensearch logs
- run scheduled anomaly detection queries against elasticsearch
- send slack or email alerts when log thresholds are exceeded
- replace yelp elastalert with a maintained fork
- deploy log alerting as a kubernetes microservice

## When to choose
- you already store logs or metrics in Elasticsearch or OpenSearch and need rule-based alerting
- you have existing ElastAlert rules and want a maintained, backwards-compatible continuation
- you want a containerized alerting microservice with a Helm chart for Kubernetes

## When to avoid
- your data lives in a database other than Elasticsearch or OpenSearch
- you need full observability suites with dashboards rather than a focused alerting tool
- you want real-time streaming alerting with sub-second latency

## Facets
- artifact type: service
- maturity: active
- function: alerting, monitoring, search-engine, scheduling
- domain: monitoring, security, self-hosted
- platform: python, self-hosted
- tags: elasticsearch, opensearch, anomaly-detection, helm-chart, log-alerting, devops, search, docker, kubernetes, linux

## Member repositories
- jertel/elastalert2 (main) score 91

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:42.377868+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:38:15.461995+00:00, confidence not recorded.
  - readme: https://github.com/jertel/elastalert2 (fetched 2026-08-28T04:03:42.377868+00:00, sha a8dd5a3ddbac)
  - registry_pypi: https://pypi.org/pypi/elastalert2/json (fetched 2026-08-29T12:43:18.723720+00:00, sha db970cf62606)
- Data as of 2026-08-30T08:39:29.467469+00:00.