1
0
Fork 0
mirror of https://github.com/monitoring-mixins/website.git synced 2024-12-14 11:37:31 +00:00
monitoring-mixins-website/assets/cloudflare/alerts.yaml

56 lines
2.2 KiB
YAML
Raw Normal View History

groups:
- name: cloudflare-alerts
rules:
- alert: CloudflareHighThreatCount
annotations:
description: The number of detected threats targeting the zone {{$labels.zone}}
is {{ printf "%.0f" $value }} which is greater than the threshold of 3.
summary: There are detected threats targeting the zone.
expr: |
sum without (instance) (increase(cloudflare_zone_threats_total[5m])) > 3
for: 5m
labels:
severity: critical
- alert: CloudflareHighRequestRate
annotations:
description: The rate of requests to {{$labels.zone}} is {{ printf "%.0f" $value
}}% of the prior 50 minute baseline which is above the threshold of 150%.
summary: A high spike in requests is occurring which may indicate an attack
or unexpected load.
expr: |
sum without (instance) (100 * (rate(cloudflare_zone_requests_total[10m]) / clamp_min(rate(cloudflare_zone_requests_total[50m] offset 10m), 1))) > 150
for: 5m
labels:
severity: warning
- alert: CloudflareHighHTTPErrorCodes
annotations:
description: The number of {{$labels.status}} HTTP status codes occurring in
the zone {{$labels.zone}} is {{ printf "%.0f" $value }} which is greater than
the threshold of 100.
summary: A high number of 4xx or 5xx HTTP status codes are occurring.
expr: |
sum without (instance) (increase(cloudflare_zone_requests_status{status=~"4.*|5.*"}[5m])) > 100
for: 5m
labels:
severity: warning
- alert: CloudflareUnhealthyPools
annotations:
description: The pool {{$labels.pool_name}} in zone {{$labels.zone}} is currently
down and unhealthy.
summary: There are unhealthy pools.
expr: |
sum without (instance, load_balancer_name) (cloudflare_zone_pool_health_status) == 0
for: 5m
labels:
severity: critical
- alert: CloudflareMetricsDown
annotations:
description: Grafana is no longer receiving metrics for the Cloudflare integration
from instance {{$labels.instance}}.
summary: Cloudflare metrics are down.
expr: |
up{job="integrations/cloudflare"} == 0
for: 5m
labels:
severity: critical