Combining Prelert, alerting, and Timelion

Prelert detects anomalies in data indexed in Elasticsearch, stores its results in Elasticsearch, but also provides out of the box dashboards to explore and understand anomalies. The Elastic stack provides a holistic platform for data analysis, in which we can just pick products to extend our anomaly detection experience. X-Pack alerting is the first choice as it could consume Prelert results to trigger relevant and accurate alerts. Timelion is also a fantastic choice to correlate the anomaly detection result to source data by using the statistics functions and customization features that it offers.

As said earlier, Prelert exposes a REST API that allows you to manage a job and get the result of the analysis.

Job details and endpoints

The preceding image details an Endpoint links section in which the REST APIs that we are going to use for alerting are listed. All APIs are documented at http://www.prelert.com/docs/products/latest/engine_api_reference...