query

type QueryHandler struct {
	// StopCh terminates the Run() method when closed
	StopCh chan struct{}
	// contains filtered or unexported fields
}

type QueryHandlerConfig struct {
	// Name is the name of the rule. This should come from
	// the 'name' field of the rule configuration file
	Name string

	// AlertMethods will be passed along with any results returned
	// by a query to the alert handler via the outputCh
	AlertMethods []alert.AlertMethod

	// Client is an *http.Client instance that will be used to
	// query Elasticsearch
	Client *http.Client

	// ESUrl is the URL of the Elasticsearch instance. This should
	// come from the 'elasticsearch.server.url' field of the main
	// configuration file
	ESUrl string

	// QueryData is the payload to be included in the query. This
	// should come from the 'body' field of the rule configuration
	// file
	QueryData map[string]interface{}

	// QueryIndex is the Elasticsearch index to be queried. This
	// should come from the 'index' field of the rule configuration
	// file
	QueryIndex string

	// Schedule is the interval at which the defined Elasticsearch
	// query should executed (in cron syntax)
	Schedule string

	// BodyField is the field of the JSON response returned by
	// Elasticsearch to be grouped on and subsequently sent to
	// the specified outputs. This should come from the 'body_field'
	// field of the rule configuration file
	BodyField string

	// Filters are the additional fields to be grouped on. These
	// should come from the 'filters' field of the rule configuration
	// file
	Filters []string

	Logger hclog.Logger
}