Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot figure out interpreting JSON variable if using "." #3276

Open
pradeepjairamani opened this issue Jan 23, 2023 · 0 comments
Open

Cannot figure out interpreting JSON variable if using "." #3276

pradeepjairamani opened this issue Jan 23, 2023 · 0 comments

Comments

@pradeepjairamani
Copy link

Hello,
I am trying to use elastalert2 post2 method
http_post2_payload:
title: "Falco Alert"
description: "Docker Client is Running inside Kubernetes. Please check in Kibana.\n container name: {{output_fields.container.image.repository}}"

log looks like this
"output_fields": {
"k8s.pod.name": "gitlab-gitlab-runner-596bcd7b57-q72l8",
"container.image.repository": "gitlab/gitlab-runner",

I am facing this error, not sure how to interpret the variable if it already contains "."
ERROR:elastalert:Uncaught exception running rule docker_client_inside_kubernetes: 'dict object' has no attribute 'container'

Can anybody help me on this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant