{"id":41018,"date":"2023-12-15T13:07:05","date_gmt":"2024-03-06T08:08:53","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82\/"},"modified":"2024-05-04T13:39:56","modified_gmt":"2024-05-04T05:39:56","slug":"%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82\/","title":{"rendered":"\u4f7f\u7528ElastAlert\u65f6\uff0c\u5c06Zabbix\u7528\u4f5c\u8b66\u62a5\u901a\u77e5\u76ee\u6807\u7684\u5907\u5fd8\u5f55"},"content":{"rendered":"

\u73af\u5883<\/h1>\n

AWS\u5de5\u4f5c\u7a7a\u95f4<\/p>\n

\u4e9a\u9a6c\u900aLinux2<\/p>\n

Docker<\/p>\n

\u5f39\u6027\u641c\u7d22 7.6.2<\/p>\n

Kibana 7.6.2<\/p>\n

ElastAlert 0.2.1 + ElastAlert \u670d\u52a1\u5668<\/p>\n

Zabbix 3.4<\/p>\n

\u5982\u679c\u4f7f\u7528\u6b63\u5e38\u65b9\u5f0f\uff0c\u4f1a\u51fa\u73b0\u9519\u8bef\u3002<\/h1>\n
  Traceback (<\/span>most recent call last)<\/span>:\r\n      File \"\/usr\/lib\/python3.6\/runpy.py\"<\/span>, line 193, in <\/span>_run_module_as_main\r\n        \"__main__\"<\/span>, mod_spec)<\/span>\r\n      File \"\/usr\/lib\/python3.6\/runpy.py\"<\/span>, line 85, in <\/span>_run_code\r\n        exec<\/span>(<\/span>code, run_globals)<\/span>\r\n      File \"\/opt\/elastalert\/elastalert\/elastalert.py\"<\/span>, line 2040, in<\/span> <module>\r\n        sys.exit(<\/span>main(<\/span>sys.argv[1:]))<\/span>\r\n      File \"\/opt\/elastalert\/elastalert\/elastalert.py\"<\/span>, line 2034, in <\/span>main\r\n        client =<\/span> ElastAlerter(<\/span>args)<\/span>\r\n      File \"\/opt\/elastalert\/elastalert\/elastalert.py\"<\/span>, line 138, in <\/span>__init__\r\n        self.rules =<\/span> self.rules_loader.load(<\/span>self.conf, self.args)<\/span>\r\n      File \"\/opt\/elastalert\/elastalert\/loaders.py\"<\/span>, line 125, in <\/span>load\r\n        raise EAException(<\/span>'Error loading file %s: %s'<\/span> % (<\/span>rule_file, e))<\/span>\r\n    elastalert.util.EAException: Error loading file rules\/a.yaml: Error initiating alert [<\/span>'zabbix'<\/span>]<\/span>: Could not import module zabbix: not enough values to unpack (<\/span>expected 2, got 1)<\/span>\r\n<\/code><\/pre>\n
\u5904\u7406<\/h1>\n
\u6211\u5728ElastAlert\u7684Pull Request\u4e2d\u63d0\u4ea4\u7684\u5185\u5bb9\u662f#2640\u3002<\/p>\n
\/home\/sano\/docker-wk3\r\n|--Dockerfiles\r\n|  |--elastalert-dockerfile\r\n|  |--fluentd-dockerfile\r\n|--data\r\n|  |--fonts\r\n|  |--mysql\r\n|  |--zabbix\r\n|--docker-compose.yml\r\n|--elastalert\r\n|  |--bin\r\n|  |  |--elastalert-start.sh\r\n|  |  |--elastic_search_status.sh\r\n|  |--config\r\n|  |  |--api.config.json\r\n|  |  |--elastalert.yaml\r\n|  |--rule_templates\r\n|  |--rules\r\n|  |  |--a.yaml\r\n|  |--zabbix\r\n|  |  |--loaders.py\r\n|  |  |--zabbix.py\r\n|--es\r\n|  |--config\r\n|  |  |--elasticsearch.yml\r\n|  |--data\r\n|--fluentd\r\n|  |--etc\r\n|  |  |--fluent.conf\r\n|  |  |--mysql_template.json\r\n|--kibana\r\n|  |--config\r\n|  |  |--kibana.yml\r\n|--mariadb\r\n|  |--etc\r\n|  |  |--mymariadb.cnf\r\n|  |--log\r\n|  |  |--error.log\r\n|  |  |--general.log\r\n|  |  |--slow.log\r\n<\/code><\/pre>\n
chmod <\/span>777 es\/data\r\nchmod <\/span>777 elastalert\/rule_templates\r\nchmod <\/span>777 elastalert\/rules\r\nchmod <\/span>777 mariadb\/log\r\nchmod <\/span>777 mariadb\/log\/error.log\r\nchmod <\/span>777 mariadb\/log\/general.log\r\nchmod <\/span>777 mariadb\/log\/slow.log\r\nchmod <\/span>777 mariadb\/log\/error.log\r\nchmod <\/span>777 mariadb\/log\/general.log\r\nchmod <\/span>777 mariadb\/log\/slow.log\r\nmkdir<\/span> -p<\/span> elastalert\/patch\r\ncd <\/span>elastalert\/patch\r\nwget https:\/\/raw.githubusercontent.com\/Yelp\/elastalert\/7466eb3f195ef8f039e4d472d16285e493e948ab\/elastalert\/loaders.py\r\nwget https:\/\/raw.githubusercontent.com\/Yelp\/elastalert\/2864bbb7936007b97ce7a7374340ed4cc4b31936\/elastalert\/zabbix.py\r\n<\/code><\/pre>\n
version<\/span>:<\/span> \"<\/span>3.7\"<\/span>\r\nservices<\/span>:<\/span>\r\n  elasticsearch<\/span>:<\/span>\r\n    container_name<\/span>:<\/span> elasticsearch<\/span>\r\n    image<\/span>:<\/span> docker.elastic.co\/elasticsearch\/elasticsearch:7.6.2<\/span>\r\n    ports<\/span>:<\/span>\r\n      -<\/span> 9200:9200<\/span>\r\n      -<\/span> 9300:9300<\/span>\r\n    environment<\/span>:<\/span>\r\n      -<\/span> ES_JAVA_OPTS=-Xms128m -Xmx256m<\/span>\r\n      -<\/span> discovery.type=single-node<\/span>\r\n    restart<\/span>:<\/span> always<\/span>\r\n    volumes<\/span>:<\/span>\r\n      -<\/span> .\/es\/data:\/usr\/share\/elasticsearch\/data<\/span>\r\n      -<\/span> .\/es\/config\/elasticsearch.yml:\/usr\/share\/elasticsearch\/config\/elasticsearch.yml<\/span>\r\n    healthcheck<\/span>:<\/span>\r\n        test<\/span>:<\/span> [<\/span>\"<\/span>CMD-SHELL\"<\/span>,<\/span> \"<\/span>curl<\/span> -f<\/span> http:\/\/localhost:9200<\/span> ||<\/span> exit<\/span> 1\"<\/span>]<\/span>\r\n        interval<\/span>:<\/span> 30s<\/span>\r\n        timeout<\/span>:<\/span> 15s<\/span>\r\n        retries<\/span>:<\/span> 3<\/span>\r\n        start_period<\/span>:<\/span> 180s<\/span>\r\n\r\n  kibana<\/span>:<\/span>\r\n    container_name<\/span>:<\/span> kibana<\/span>\r\n    image<\/span>:<\/span> docker.elastic.co\/kibana\/kibana:7.6.2<\/span>\r\n    ports<\/span>:<\/span>\r\n      -<\/span> 5601:5601<\/span>\r\n    depends_on<\/span>:<\/span>\r\n      -<\/span> elasticsearch<\/span>\r\n    restart<\/span>:<\/span> always<\/span>\r\n    volumes<\/span>:<\/span>\r\n      -<\/span> .\/kibana\/config\/kibana.yml:\/usr\/share\/kibana\/config\/kibana.yml<\/span>\r\n    healthcheck<\/span>:<\/span>\r\n        test<\/span>:<\/span> [<\/span>\"<\/span>CMD-SHELL\"<\/span>,<\/span> \"<\/span>curl<\/span> -f<\/span> http:\/\/localhost:5601\/api\/status<\/span> ||<\/span> exit<\/span> 1\"<\/span>]<\/span>\r\n        interval<\/span>:<\/span> 30s<\/span>\r\n        timeout<\/span>:<\/span> 15s<\/span>\r\n        retries<\/span>:<\/span> 3<\/span>\r\n        start_period<\/span>:<\/span> 200s<\/span>\r\n\r\n  fluentd<\/span>:<\/span>\r\n    container_name<\/span>:<\/span> fluentd<\/span>\r\n    build<\/span>:<\/span>\r\n      context<\/span>:<\/span> .<\/span>\r\n      dockerfile<\/span>:<\/span> Dockerfiles\/fluentd-dockerfile<\/span>\r\n    image<\/span>:<\/span> fluentd:1.10.2<\/span>\r\n    ports<\/span>:<\/span>\r\n      -<\/span> 24224:24224<\/span>\r\n      -<\/span> 24224:24224\/udp<\/span>\r\n    environment<\/span>:<\/span>\r\n      -<\/span> FLUENTD_CONF=fluent.conf<\/span>\r\n    volumes<\/span>:<\/span>\r\n      -<\/span> .\/fluentd\/etc\/fluent.conf:\/fluentd\/etc\/fluent.conf<\/span>\r\n      -<\/span> .\/fluentd\/etc\/mysql_template.json:\/fluentd\/etc\/mysql_template.json<\/span>\r\n      -<\/span> .\/mariadb\/log:\/var\/log\/mysql<\/span>\r\n    user<\/span>:<\/span> root<\/span>\r\n    restart<\/span>:<\/span> always<\/span>\r\n\r\n  mariadb<\/span>:<\/span>\r\n    container_name<\/span>:<\/span> mariadb<\/span>\r\n    image<\/span>:<\/span> mariadb:10.4.11<\/span>\r\n    ports<\/span>:<\/span>\r\n      -<\/span> 3306:3306<\/span>\r\n    environment<\/span>:<\/span>\r\n      -<\/span> MYSQL_ROOT_PASSWORD=mariadb<\/span>\r\n    volumes<\/span>:<\/span>\r\n      -<\/span> .\/mariadb\/etc:\/etc\/mysql\/conf.d<\/span>\r\n      -<\/span> .\/mariadb\/log:\/var\/log\/mysql<\/span>\r\n    restart<\/span>:<\/span> always<\/span>\r\n    healthcheck<\/span>:<\/span>\r\n        test<\/span>:<\/span> [<\/span>\"<\/span>CMD-SHELL\"<\/span>,<\/span> \"<\/span>mysqladmin<\/span> -h<\/span> 'localhost'<\/span> -u<\/span> root<\/span> -pmariadb<\/span> ping<\/span> --silent\"<\/span>]<\/span>\r\n        interval<\/span>:<\/span> 30s<\/span>\r\n        timeout<\/span>:<\/span> 30s<\/span>\r\n        retries<\/span>:<\/span> 3<\/span>\r\n\r\n  elastalert<\/span>:<\/span>\r\n    container_name<\/span>:<\/span> elastalert<\/span>\r\n    build<\/span>:<\/span>\r\n      context<\/span>:<\/span> .<\/span>\r\n      dockerfile<\/span>:<\/span> Dockerfiles\/elastalert-dockerfile<\/span>\r\n    image<\/span>:<\/span> elastalert:0.2.1<\/span>\r\n    ports<\/span>:<\/span>\r\n      -<\/span> 3030:3030<\/span>\r\n      -<\/span> 3333:3333<\/span>\r\n    depends_on<\/span>:<\/span>\r\n      -<\/span> elasticsearch<\/span>\r\n    restart<\/span>:<\/span> always<\/span>\r\n    volumes<\/span>:<\/span>\r\n      -<\/span> .\/elastalert\/config\/elastalert.yaml:\/opt\/elastalert\/config.yaml<\/span>\r\n      -<\/span> .\/elastalert\/config\/api.config.json:\/opt\/elastalert-server\/config\/config.json<\/span>\r\n      -<\/span> .\/elastalert\/rules:\/opt\/elastalert\/rules<\/span>\r\n      -<\/span> .\/elastalert\/rule_templates:\/opt\/elastalert\/rule_templates<\/span>\r\n      -<\/span> .\/elastalert\/zabbix\/zabbix.py:\/opt\/elastalert\/elastalert\/zabbix.py<\/span>\r\n      -<\/span> .\/elastalert\/zabbix\/loaders.py:\/opt\/elastalert\/elastalert\/loaders.py<\/span> \r\n    healthcheck<\/span>:<\/span>\r\n        test<\/span>:<\/span> [<\/span>\"<\/span>CMD-SHELL\"<\/span>,<\/span> \"<\/span>curl<\/span> -f<\/span> http:\/\/localhost:3030<\/span> ||<\/span> exit<\/span> 1\"<\/span>]<\/span>\r\n        interval<\/span>:<\/span> 30s<\/span>\r\n        timeout<\/span>:<\/span> 15s<\/span>\r\n        retries<\/span>:<\/span> 3<\/span>\r\n        start_period<\/span>:<\/span> 200s<\/span>\r\n\r\n  mysql<\/span>:<\/span>\r\n    image<\/span>:<\/span> mysql:5.7<\/span>\r\n    restart<\/span>:<\/span> always<\/span>\r\n    command<\/span>:<\/span> mysqld --character-set-server=utf8 --collation-server=utf8_unicode_ci<\/span>\r\n    volumes<\/span>:<\/span>\r\n      -<\/span> .\/data\/mysql:\/var\/lib\/mysql<\/span>\r\n    ports<\/span>:<\/span>\r\n      -<\/span> \"<\/span>33060:3306\"<\/span>\r\n    environment<\/span>:<\/span>\r\n      MYSQL_ROOT_PASSWORD<\/span>:<\/span> docker<\/span>\r\n      MYSQL_DATABASE<\/span>:<\/span> zabbix<\/span>\r\n      MYSQL_USER<\/span>:<\/span> zabbix<\/span>\r\n      MYSQL_PASSWORD<\/span>:<\/span> zabbix<\/span>\r\n\r\n  zabbix-server<\/span>:<\/span>\r\n    image<\/span>:<\/span> zabbix\/zabbix-server-mysql:alpine-3.4-latest<\/span>\r\n    restart<\/span>:<\/span> always<\/span>\r\n    volumes<\/span>:<\/span>\r\n      -<\/span> .\/data\/zabbix:\/var\/lib\/zabbix<\/span>\r\n    environment<\/span>:<\/span>\r\n      DB_SERVER_HOST<\/span>:<\/span> mysql<\/span>\r\n      MYSQL_USER<\/span>:<\/span> zabbix<\/span>\r\n      MYSQL_PASSWORD<\/span>:<\/span> zabbix<\/span>\r\n    ports<\/span>:<\/span>\r\n      -<\/span> \"<\/span>10051:10051\"<\/span>\r\n    depends_on<\/span>:<\/span>\r\n      -<\/span> mysql<\/span>\r\n\r\n  zabbix-web<\/span>:<\/span>\r\n    image<\/span>:<\/span> zabbix\/zabbix-web-nginx-mysql:alpine-3.4-latest<\/span>\r\n    restart<\/span>:<\/span> always<\/span>\r\n    volumes<\/span>:<\/span>\r\n      -<\/span> .\/data\/fonts:\/usr\/share\/zabbix\/fonts<\/span>\r\n    environment<\/span>:<\/span>\r\n      DB_SERVER_HOST<\/span>:<\/span> mysql<\/span>\r\n      MYSQL_USER<\/span>:<\/span> zabbix<\/span>\r\n      MYSQL_PASSWORD<\/span>:<\/span> zabbix<\/span>\r\n      ZBX_SERVER_HOST<\/span>:<\/span> zabbix-server<\/span>\r\n      PHP_TZ<\/span>:<\/span> Asia\/Tokyo<\/span>\r\n    ports<\/span>:<\/span>\r\n      -<\/span> \"<\/span>80:80\"<\/span>\r\n    depends_on<\/span>:<\/span>\r\n      -<\/span> mysql<\/span>\r\n      -<\/span> zabbix-server<\/span>\r\n<\/code><\/pre>\n
Dockerfiles\/elastalert-dockerfile => Dockerfiles\/elastalert\u7684Docker\u6587\u4ef6<\/p>\n
FROM servercentral\/elastalert:latest\r\n\r\nUSER root\r\n\r\nRUN apk update && \\\r\n    apk add bash curl && \\\r\n    rm -rf \/var\/cache\/apk\/* \r\n\r\nADD .\/elastalert\/bin\/elastalert-start.sh \/usr\/local\/bin\/\r\nADD .\/elastalert\/bin\/elastic_search_status.sh \/usr\/local\/bin\/\r\n\r\nRUN chmod +x \/usr\/local\/bin\/elastalert-start.sh && \\\r\n    chmod +x \/usr\/local\/bin\/elastic_search_status.sh\r\n\r\nUSER node\r\n\r\nENTRYPOINT [\"\/usr\/local\/bin\/elastalert-start.sh\"]\r\n<\/code><\/pre>\n
FROM fluent\/fluentd:v1.10.2-debian-1.0\r\n\r\n# Use root account to use apt\r\nUSER root\r\n\r\n# below RUN includes plugin as examples elasticsearch is not required\r\n# you may customize including plugins as you wish\r\nRUN buildDeps=\"sudo make gcc g++ libc-dev\" \\\r\n && apt-get update \\\r\n && apt-get install -y --no-install-recommends $buildDeps \\\r\n && sudo gem install fluent-plugin-elasticsearch -v 4.0.7 \\\r\n && sudo gem install fluent-plugin-mysqlslowquery -v 0.0.9 \\\r\n && sudo gem install elasticsearch-xpack -v 7.6.0 \\\r\n && sudo gem sources --clear-all \\\r\n && SUDO_FORCE_REMOVE=yes \\\r\n    apt-get purge -y --auto-remove \\\r\n                  -o APT::AutoRemove::RecommendsImportant=false \\\r\n                  $buildDeps \\\r\n && rm -rf \/var\/lib\/apt\/lists\/* \\\r\n && rm -rf \/tmp\/* \/var\/tmp\/* \/usr\/lib\/ruby\/gems\/*\/cache\/*.gem\r\n\r\nUSER fluent\r\n<\/code><\/pre>\n
#!\/bin\/bash<\/span>\r\n\r\nset<\/span> -e<\/span>\r\n\r\necho<\/span> \"Giving Elasticsearch at <\/span>$ELASTICSEARCH_URL<\/span> time to start...\"<\/span>\r\n\r\nelastic_search_status.sh\r\n\r\necho<\/span> \"Starting ElastAlert!\"<\/span>\r\nnpm start\r\n\r\n<\/code><\/pre>\n
#!\/bin\/bash<\/span>\r\n\r\nset<\/span> -e<\/span>\r\n\r\nif<\/span> [<\/span> $# <\/span>-gt<\/span> 0 ]<\/span>;<\/span> then\r\n  <\/span>ES_URL<\/span>=<\/span>\"<\/span>$1<\/span>\"<\/span>\r\nelif<\/span> [[<\/span> -n<\/span> $ELASTICSEARCH_URL<\/span> ]]<\/span>;<\/span> then\r\n  <\/span>ES_URL<\/span>=<\/span>\"<\/span>$ELASTICSEARCH_URL<\/span>\"<\/span>\r\nelif<\/span> [[<\/span> -n<\/span> $ES_HOST<\/span> ]]<\/span> &&<\/span> [[<\/span> -n<\/span> $ES_PORT<\/span> ]]<\/span>;<\/span> then\r\n  <\/span>ES_URL<\/span>=<\/span>\"http:\/\/<\/span>$ES_HOST<\/span>:<\/span>$ES_PORT<\/span>\"<\/span>\r\nelse\r\n  <\/span>ES_URL<\/span>=<\/span>\"http:\/\/elasticsearch:9200\"<\/span>\r\nfi\r\n\r\nuntil<\/span> [[<\/span> \"<\/span>$(<\/span>curl -fsSL<\/span> \"<\/span>$ES_URL<\/span>\/_cat\/health?h=status\"<\/span> | sed<\/span> -r<\/span> 's\/^[[:space:]]+|[[:space:]]+$\/\/g'<\/span>)<\/span>\"<\/span> =<\/span>~ ^(<\/span>yellow|green)<\/span>$ <\/span>]]<\/span>;<\/span> do<\/span>\r\n  # printf '+' >&2<\/span>\r\n  sleep <\/span>1\r\ndone\r\n\r\n<\/span>echo<\/span> \"Elasticsearch is up and healthy at \"<\/span>$ES_URL<\/span>\"\"<\/span> ><\/span>&2\r\n\r\n<\/code><\/pre>\n
{<\/span>\r\n  \"appName\"<\/span>:<\/span> \"elastalert-server\"<\/span>,<\/span>\r\n  \"port\"<\/span>:<\/span> 3030<\/span>,<\/span>\r\n  \"wsport\"<\/span>:<\/span> 3333<\/span>,<\/span>\r\n  \"elastalertPath\"<\/span>:<\/span> \"\/opt\/elastalert\"<\/span>,<\/span>\r\n  \"verbose\"<\/span>:<\/span> false<\/span>,<\/span>\r\n  \"es_debug\"<\/span>:<\/span> false<\/span>,<\/span>\r\n  \"debug\"<\/span>:<\/span> false<\/span>,<\/span>\r\n  \"rulesPath\"<\/span>:<\/span> {<\/span>\r\n    \"relative\"<\/span>:<\/span> true<\/span>,<\/span>\r\n    \"path\"<\/span>:<\/span> \"\/rules\"<\/span>\r\n  },<\/span>\r\n  \"templatesPath\"<\/span>:<\/span> {<\/span>\r\n    \"relative\"<\/span>:<\/span> true<\/span>,<\/span>\r\n    \"path\"<\/span>:<\/span> \"\/rule_templates\"<\/span>\r\n  },<\/span>\r\n  \"es_host\"<\/span>:<\/span> \"elasticsearch\"<\/span>,<\/span>\r\n  \"es_port\"<\/span>:<\/span> 9200<\/span>,<\/span>\r\n  \"es_username\"<\/span>:<\/span> \"\"<\/span>,<\/span>\r\n  \"es_password\"<\/span>:<\/span> \"\"<\/span>,<\/span>\r\n  \"es_ssl\"<\/span>:<\/span> false<\/span>,<\/span>\r\n  \"writeback_index\"<\/span>:<\/span> \"elastalert_status\"<\/span>\r\n}<\/span>\r\n\r\n<\/code><\/pre>\n
# The elasticsearch hostname for metadata writeback<\/span>\r\n# Note that every rule can have its own elasticsearch host<\/span>\r\nes_host<\/span>:<\/span> elasticsearch<\/span>\r\n\r\n# The elasticsearch port<\/span>\r\nes_port<\/span>:<\/span> 9200<\/span>\r\n\r\n# This is the folder that contains the rule yaml files<\/span>\r\n# Any .yaml file will be loaded as a rule<\/span>\r\nrules_folder<\/span>:<\/span> rules<\/span>\r\n\r\n# How often ElastAlert will query elasticsearch<\/span>\r\n# The unit can be anything from weeks to seconds<\/span>\r\nrun_every<\/span>:<\/span>\r\n  seconds<\/span>:<\/span> 60<\/span>\r\n\r\n# ElastAlert will buffer results from the most recent<\/span>\r\n# period of time, in case some log sources are not in real time<\/span>\r\nbuffer_time<\/span>:<\/span>\r\n  minutes<\/span>:<\/span> 1<\/span>\r\n\r\n# Optional URL prefix for elasticsearch<\/span>\r\n#es_url_prefix: elasticsearch<\/span>\r\n\r\n# Connect with TLS to elasticsearch<\/span>\r\n#use_ssl: True<\/span>\r\n\r\n# Verify TLS certificates<\/span>\r\n#verify_certs: True<\/span>\r\n\r\n# GET request with body is the default option for Elasticsearch.<\/span>\r\n# If it fails for some reason, you can pass 'GET', 'POST' or 'source'.<\/span>\r\n# See http:\/\/elasticsearch-py.readthedocs.io\/en\/master\/connection.html?highlight=send_get_body_as#transport<\/span>\r\n# for details<\/span>\r\n#es_send_get_body_as: GET<\/span>\r\n\r\n# Option basic-auth username and password for elasticsearch<\/span>\r\n#es_username: someusername<\/span>\r\n#es_password: somepassword<\/span>\r\n\r\n# The index on es_host which is used for metadata storage<\/span>\r\n# This can be a unmapped index, but it is recommended that you run<\/span>\r\n# elastalert-create-index to set a mapping<\/span>\r\nwriteback_index<\/span>:<\/span> elastalert_status<\/span>\r\n\r\n# If an alert fails for some reason, ElastAlert will retry<\/span>\r\n# sending the alert until this time period has elapsed<\/span>\r\nalert_time_limit<\/span>:<\/span>\r\n  days<\/span>:<\/span> 2<\/span>\r\n\r\nskip_invalid<\/span>:<\/span> True<\/span>\r\n\r\n<\/code><\/pre>\n
alert<\/span>:<\/span>\r\n  -<\/span> zabbix<\/span>\r\nzbx_sender_host<\/span>:<\/span> zabbix-server<\/span>\r\nzbx_sender_port<\/span>:<\/span> 10051<\/span>\r\nzbx_host<\/span>:<\/span> \"<\/span>test001\"<\/span>\r\nzbx_key<\/span>:<\/span> \"<\/span>sender_load1\"<\/span>\r\nalert_subject<\/span>:<\/span> a<\/span>\r\nalert_subject_args<\/span>:<\/span> []<\/span>\r\nalert_text<\/span>:<\/span> b<\/span>\r\nalert_text_args<\/span>:<\/span> []<\/span>\r\nfilter<\/span>:<\/span>\r\n  -<\/span> query<\/span>:<\/span>\r\n      query_string<\/span>:<\/span>\r\n        query<\/span>:<\/span> '<\/span>message:Quit'<\/span>\r\nindex<\/span>:<\/span> mariadblog-*<\/span>\r\nis_enabled<\/span>:<\/span> true<\/span>\r\nname<\/span>:<\/span> a<\/span>\r\nnum_events<\/span>:<\/span> 1<\/span>\r\nrealert<\/span>:<\/span>\r\n  minutes<\/span>:<\/span> 5<\/span>\r\nterms_size<\/span>:<\/span> 50<\/span>\r\ntimeframe<\/span>:<\/span>\r\n  minutes<\/span>:<\/span> 1<\/span>\r\ntimestamp_field<\/span>:<\/span> '<\/span>@timestamp'<\/span>\r\ntimestamp_type<\/span>:<\/span> iso<\/span>\r\ntype<\/span>:<\/span> frequency<\/span>\r\nuse_strftime_index<\/span>:<\/span> false<\/span>\r\n<\/code><\/pre>\n
cluster.name<\/span>:<\/span> \"<\/span>docker-cluster\"<\/span>\r\nnetwork.host<\/span>:<\/span> 0.0.0.0<\/span>\r\ndiscovery.zen.minimum_master_nodes<\/span>:<\/span> 1<\/span>\r\n<\/code><\/pre>\n
server.name<\/span>:<\/span> kibana<\/span>\r\nserver.host<\/span>:<\/span> \"<\/span>0\"<\/span>\r\nelasticsearch.hosts<\/span>:<\/span> http:\/\/elasticsearch:9200<\/span>\r\nxpack.monitoring.ui.container.elasticsearch.enabled<\/span>:<\/span> true<\/span>\r\n<\/code><\/pre>\n
<source>\r\n  @type mysql_slow_query\r\n  path \/var\/log\/mysql\/slow.log\r\n  pos_file \/tmp\/mysql\/slow.pos\r\n  tag mysqld.slow_query\r\n   <parse>\r\n     @type none\r\n   <\/parse>\r\n<\/source>\r\n<source>\r\n  @type tail\r\n  format none\r\n  path \/var\/log\/mysql\/general.log\r\n  pos_file \/tmp\/mysql\/general.pos\r\n  tag mysqld.general\r\n<\/source>\r\n<source>\r\n  @type tail\r\n  format none\r\n  path \/var\/log\/mysql\/error.log\r\n  pos_file \/tmp\/mysql\/error.pos\r\n  tag mysqld.error\r\n<\/source>\r\n\r\n<match **.**>\r\n  @type copy\r\n  <store>\r\n    @type stdout\r\n  <\/store>\r\n  <store>\r\n    @type elasticsearch\r\n    include_tag_key true\r\n    include_timestamp true\r\n    tag_key @log_name\r\n    host elasticsearch\r\n    port 9200\r\n    logstash_format true\r\n    logstash_prefix mariadblog\r\n  <\/store>\r\n<\/match>\r\n\r\n<\/code><\/pre>\n
{<\/span>\r\n    \"index_patterns\"<\/span>:<\/span> [<\/span>\"mysql-log-*\"<\/span>],<\/span> \r\n    \"settings\"<\/span>:<\/span> {<\/span>\r\n      \"number_of_shards\"<\/span>:<\/span> 1<\/span>,<\/span>\r\n      \"number_of_replicas\"<\/span>:<\/span> 1<\/span>,<\/span>\r\n      \"index.lifecycle.name\"<\/span>:<\/span> \"myisql-policy\"<\/span>,<\/span> \r\n      \"index.lifecycle.rollover_alias\"<\/span>:<\/span> \"mysql-log\"<\/span>\r\n    }<\/span>\r\n  }<\/span>\r\n\r\n<\/code><\/pre>\n
[mysqld]\r\ngeneral_log\r\ngeneral_log_file=\/var\/log\/mysql\/general.log\r\nslow_query_log\r\nslow_query_log_file=\/var\/log\/mysql\/slow.log\r\nlong_query_time=5\r\nlog-queries-not-using-indexes\r\nlog-error=\/var\/log\/mysql\/error.log\r\n\r\n<\/code><\/pre>\n
docker-compose up -d<\/span>\r\n<\/code><\/pre>\n
\"1.png\"<\/div>\n
\"2.png\"<\/div>\n
\"3.png\"<\/div>\n","protected":false},"excerpt":{"rendered":"
\u73af\u5883 AWS\u5de5\u4f5c\u7a7a\u95f4 \u4e9a\u9a6c\u900aLinux2 Docker \u5f39\u6027\u641c\u7d22 7.6.2 Kibana 7.6.2 Ela […]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-41018","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n\u4f7f\u7528ElastAlert\u65f6\uff0c\u5c06Zabbix\u7528\u4f5c\u8b66\u62a5\u901a\u77e5\u76ee\u6807\u7684\u5907\u5fd8\u5f55 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528elastalert\u65f6\uff0c\u5c06zabbix\u7528\u4f5c\u8b66\u62a5\u901a\u77e5\u76ee\u6807\u7684\u5907\u5fd8\u5f55\u3002\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f7f\u7528ElastAlert\u65f6\uff0c\u5c06Zabbix\u7528\u4f5c\u8b66\u62a5\u901a\u77e5\u76ee\u6807\u7684\u5907\u5fd8\u5f55\" \/>\n<meta property=\"og:description\" content=\"\u73af\u5883 AWS\u5de5\u4f5c\u7a7a\u95f4 \u4e9a\u9a6c\u900aLinux2 Docker \u5f39\u6027\u641c\u7d22 7.6.2 Kibana 7.6.2 Ela […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528elastalert\u65f6\uff0c\u5c06zabbix\u7528\u4f5c\u8b66\u62a5\u901a\u77e5\u76ee\u6807\u7684\u5907\u5fd8\u5f55\u3002\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2024-03-06T08:08:53+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-04T05:39:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d445a37434c4406c9f02c\/23-0.png\" \/>\n<meta name=\"author\" content=\"\u6e05, \u5b87\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u6e05, \u5b87\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82\/\",\"name\":\"\u4f7f\u7528ElastAlert\u65f6\uff0c\u5c06Zabbix\u7528\u4f5c\u8b66\u62a5\u901a\u77e5\u76ee\u6807\u7684\u5907\u5fd8\u5f55 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2024-03-06T08:08:53+00:00\",\"dateModified\":\"2024-05-04T05:39:56+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/1a6ecd3d914d22a5ac32791ffc1fbd8e\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f7f\u7528ElastAlert\u65f6\uff0c\u5c06Zabbix\u7528\u4f5c\u8b66\u62a5\u901a\u77e5\u76ee\u6807\u7684\u5907\u5fd8\u5f55\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/1a6ecd3d914d22a5ac32791ffc1fbd8e\",\"name\":\"\u6e05, \u5b87\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4b2016c18459a605fc469c7566608f5686491baa112d0871ee613f61b7210565?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4b2016c18459a605fc469c7566608f5686491baa112d0871ee613f61b7210565?s=96&d=mm&r=g\",\"caption\":\"\u6e05, \u5b87\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyu\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u4f7f\u7528ElastAlert\u65f6\uff0c\u5c06Zabbix\u7528\u4f5c\u8b66\u62a5\u901a\u77e5\u76ee\u6807\u7684\u5907\u5fd8\u5f55 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528elastalert\u65f6\uff0c\u5c06zabbix\u7528\u4f5c\u8b66\u62a5\u901a\u77e5\u76ee\u6807\u7684\u5907\u5fd8\u5f55\u3002\/","og_locale":"zh_CN","og_type":"article","og_title":"\u4f7f\u7528ElastAlert\u65f6\uff0c\u5c06Zabbix\u7528\u4f5c\u8b66\u62a5\u901a\u77e5\u76ee\u6807\u7684\u5907\u5fd8\u5f55","og_description":"\u73af\u5883 AWS\u5de5\u4f5c\u7a7a\u95f4 \u4e9a\u9a6c\u900aLinux2 Docker \u5f39\u6027\u641c\u7d22 7.6.2 Kibana 7.6.2 Ela […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528elastalert\u65f6\uff0c\u5c06zabbix\u7528\u4f5c\u8b66\u62a5\u901a\u77e5\u76ee\u6807\u7684\u5907\u5fd8\u5f55\u3002\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2024-03-06T08:08:53+00:00","article_modified_time":"2024-05-04T05:39:56+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d445a37434c4406c9f02c\/23-0.png"}],"author":"\u6e05, \u5b87","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u6e05, \u5b87","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"8 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82\/","name":"\u4f7f\u7528ElastAlert\u65f6\uff0c\u5c06Zabbix\u7528\u4f5c\u8b66\u62a5\u901a\u77e5\u76ee\u6807\u7684\u5907\u5fd8\u5f55 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2024-03-06T08:08:53+00:00","dateModified":"2024-05-04T05:39:56+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/1a6ecd3d914d22a5ac32791ffc1fbd8e"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u4f7f\u7528ElastAlert\u65f6\uff0c\u5c06Zabbix\u7528\u4f5c\u8b66\u62a5\u901a\u77e5\u76ee\u6807\u7684\u5907\u5fd8\u5f55"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/1a6ecd3d914d22a5ac32791ffc1fbd8e","name":"\u6e05, \u5b87","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4b2016c18459a605fc469c7566608f5686491baa112d0871ee613f61b7210565?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4b2016c18459a605fc469c7566608f5686491baa112d0871ee613f61b7210565?s=96&d=mm&r=g","caption":"\u6e05, \u5b87"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyu\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8elastalert%e6%97%b6%ef%bc%8c%e5%b0%86zabbix%e7%94%a8%e4%bd%9c%e8%ad%a6%e6%8a%a5%e9%80%9a%e7%9f%a5%e7%9b%ae%e6%a0%87%e7%9a%84%e5%a4%87%e5%bf%98%e5%bd%95%e3%80%82\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/41018","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=41018"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/41018\/revisions"}],"predecessor-version":[{"id":98650,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/41018\/revisions\/98650"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=41018"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=41018"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=41018"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}