Implement alerting

[nitisht]

We need to add alerting optional per log stream. Config would look like this:

{
  "alerts": [
    {
      "name": "server-fail-alert",
      "message": "server reported error status",
      "rule": {
        "field": "http_status",
        "contains": "500", // equals, greaterThan, lessThan
        "repeats": "5", // repeats this many times
        "within": "10m" // for this duration seconds (s), minutes (m), hours (h), days (d)
      },
      "target": [
        {
          "name": "slack-target",
          "server_url": "http://mailgun.com",
          "api_key": "xxxx"
        }
      ]
    }
  ]
}

This config would be added to the Parseable server, per log stream via API

[de-sh]

Within the rule object, let's call it filter instead of contains, would that make more sense?

[nitisht]

yes, good catch!