{"action":"created","issue":{"url":"https://api.github.com/repos/Yelp/elastalert/issues/1829","repository_url":"https://api.github.com/repos/Yelp/elastalert","labels_url":"https://api.github.com/repos/Yelp/elastalert/issues/1829/labels{/name}","comments_url":"https://api.github.com/repos/Yelp/elastalert/issues/1829/comments","events_url":"https://api.github.com/repos/Yelp/elastalert/issues/1829/events","html_url":"https://github.com/Yelp/elastalert/issues/1829","id":344800279,"node_id":"MDU6SXNzdWUzNDQ4MDAyNzk=","number":1829,"title":"want to set elastalert when a perticular string is not there in message field","user":{"login":"samratbe","id":36438473,"node_id":"MDQ6VXNlcjM2NDM4NDcz","avatar_url":"https://avatars2.githubusercontent.com/u/36438473?v=4","gravatar_id":"","url":"https://api.github.com/users/samratbe","html_url":"https://github.com/samratbe","followers_url":"https://api.github.com/users/samratbe/followers","following_url":"https://api.github.com/users/samratbe/following{/other_user}","gists_url":"https://api.github.com/users/samratbe/gists{/gist_id}","starred_url":"https://api.github.com/users/samratbe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/samratbe/subscriptions","organizations_url":"https://api.github.com/users/samratbe/orgs","repos_url":"https://api.github.com/users/samratbe/repos","events_url":"https://api.github.com/users/samratbe/events{/privacy}","received_events_url":"https://api.github.com/users/samratbe/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-07-26T11:13:15Z","updated_at":"2018-07-27T05:04:47Z","closed_at":null,"author_association":"NONE","body":"this is my yaml file for elastalert rule:\r\n\r\ni want to get email alert when the string \"Integration Activity Report Mail Sent Successfully\" is not there in logs. any help would be appreciated. \r\n\r\n \r\n\r\nes_host: xxxxxxxxxxxxxxxxx\r\nes_port: xxx\r\nname:  Integration Activity Report Mail Sent Successfully\r\ntype: frequency\r\nindex: \"xxxxxxxxxxxxxxxxxxx\"\r\nnum_events: 1\r\ntimeframe:\r\n    hours: 15\r\nthreshold: 1\r\nfilter:\r\n- query:\r\n    query_string:\r\n       query: \"NOT message: \\\"Integration Activity Report Mail Sent Successfully\\\"\"\r\n\r\nalert:\r\n- \"email\"\r\nemail:\r\nxxxxxxxxx"},"comment":{"url":"https://api.github.com/repos/Yelp/elastalert/issues/comments/408312389","html_url":"https://github.com/Yelp/elastalert/issues/1829#issuecomment-408312389","issue_url":"https://api.github.com/repos/Yelp/elastalert/issues/1829","id":408312389,"node_id":"MDEyOklzc3VlQ29tbWVudDQwODMxMjM4OQ==","user":{"login":"samratbe","id":36438473,"node_id":"MDQ6VXNlcjM2NDM4NDcz","avatar_url":"https://avatars2.githubusercontent.com/u/36438473?v=4","gravatar_id":"","url":"https://api.github.com/users/samratbe","html_url":"https://github.com/samratbe","followers_url":"https://api.github.com/users/samratbe/followers","following_url":"https://api.github.com/users/samratbe/following{/other_user}","gists_url":"https://api.github.com/users/samratbe/gists{/gist_id}","starred_url":"https://api.github.com/users/samratbe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/samratbe/subscriptions","organizations_url":"https://api.github.com/users/samratbe/orgs","repos_url":"https://api.github.com/users/samratbe/repos","events_url":"https://api.github.com/users/samratbe/events{/privacy}","received_events_url":"https://api.github.com/users/samratbe/received_events","type":"User","site_admin":false},"created_at":"2018-07-27T05:04:47Z","updated_at":"2018-07-27T05:04:47Z","author_association":"NONE","body":"any help or suggestion ? "}}
{"actor":{"display_login":"samratbe"}}