阿里云日志告警备忘

租车异常告警
_container_name_:bike-ca and 更新初始化租车行程记录为异常租车 | SELECT substr(content, 79) as message, count(*) as count GROUP BY message ORDER BY count DESC
_container_name_:bike-ca and "更新初始化租车行程记录为异常租车" | select COUNT(*) as count
告警内容模板
阿里云账号：${aliuid}
告警规则名称：${alert_name}
告警标题：${annotations.title}
告警内容：${results[0].raw_results}
count > 99

线下站点告警 企业微信告警
 * and _container_name_ : bike-jms and BikeJms300Listener and _namespace_: chuzhou |SELECT  COUNT(*) as count
count < 20
https://qyapi.weixin.qq.com/cgi-bin/webhook/send?key=96f2xxxxxxxxxx

bike-ca告警  杭州
_container_name_:bike-ca and "RequestBA failed!" and 杭州主城区 | SELECT substr(content, 79) as message, count(*) as count GROUP BY message ORDER BY count DESC
_container_name_:bike-ca and "RequestBA failed!" and 杭州主城区| select COUNT(*) as count
$1.count > 80
[杭州主城区] 告警 bike-ca 请求线下服务失败过多！
${results[0].rawresults}

bike-ca告警 
_container_name_:bike-ca and "RequestBA failed!"| SELECT substr(content, 79) as message, count(*) as count GROUP BY message ORDER BY count DESC
_container_name_:bike-ca and "RequestBA failed!"| select COUNT(*) as count
$1.count > 90
服务：bike-ca 请求线下服务失败过多！
${results[0].rawresults}

通州服务报警 bike-ca "RequestBA failed!"
_container_name_:bike-ca and "RequestBA failed!" and 通州 | SELECT substr(message, 79) as message, count(*) as count GROUP BY message ORDER BY count DESC
_container_name_:bike-ca and "RequestBA failed!" and 通州| select COUNT(*) as count
$1.count > 100
服务：bike-ca 请求线下服务失败过多！
${results[0].rawresults}

服务 bike-ca "RequestBA failed!" （不包含通州）
_container_name_:bike-ca and "RequestBA failed!" not 通州| SELECT substr(content, 79) as message, count(*) as count GROUP BY message ORDER BY count DESC
_container_name_:bike-ca and "RequestBA failed!" not 通州 | select COUNT(*) as count
$1.count > 50
服务：bike-ca 请求线下服务失败过多！
${results[0].rawresults}