docker build . -t anjia0532/elastalert-docker:v0.2.4 --build-arg MIRROR=true --build-arg ALPINE_HOST="mirrors.aliyun.com" --build-arg PIP_MIRROR="https://mirrors.aliyun.com/pypi/simple/"

+ apk add --no-cache --virtual .build-dependencies gcc libffi-dev python-dev tar musl-dev openssl-dev
fetch http://mirrors.aliyun.com/alpine/v3.12/main/x86_64/APKINDEX.tar.gz
fetch http://mirrors.aliyun.com/alpine/v3.12/community/x86_64/APKINDEX.tar.gz
ERROR: unsatisfiable constraints:
  python-dev (missing):
    required by: .build-dependencies-20200814.022322[python-dev]
The command '/bin/sh -c set -ex &&     if $MIRROR; then sed -i "s/dl-cdn.alpinelinux.org/${ALPINE_HOST}/g" /etc/apk/repositories ; pip config set global.index-url ${PIP_MIRROR} ; /bin/echo -e "[easy_install]\\nindex-url = ${PIP_MIRROR}" >> ~/.pydistutils.cfg ; fi &&     apk update &&     apk upgrade &&     apk add --no-cache         ca-certificates         tzdata         su-exec         dumb-init         bash         curl         openssl &&     apk add --no-cache --virtual         .build-dependencies         gcc         libffi-dev         python-dev         tar         musl-dev         openssl-dev &&     pip install --upgrade pip' returned a non-zero code: 2

elastic是内部的域名
<图片我删除了，涉及一部分隐私>

一直在刷Waiting for Elasticsearch

alert_text_type: alert_text_only
alert_text: |
  ========start===========
  触发时间: {}
  告警主题: {} 服务异常
  告警数量: {} 
  --------详细信息--------
  trace.id: {}
  报错接口: {}
  接口参数: {}
  错误内容: {}
  状态码: {}
  ========end============
alert_text_args:
  - "@timestamp"
  - service.name
  - num_hits
  - trace.id
  - transaction.custom.api
  - transaction.custom.errorMessage
  - transaction.custom.responseStatus
  - transaction.custom.data    >>> 这个内容经常会超过2048，我希望它限制在500个字数

class BasicMatchString(object):
def _add_custom_alert_text(self):
        missing = self.rule.get('alert_missing_value', 'null')
        alert_text = str(self.rule.get('alert_text', ''))
        if 'alert_text_args' in self.rule:
            alert_text_args = self.rule.get('alert_text_args')
            alert_text_values = [lookup_es_key(self.match, arg) for arg in alert_text_args]

            # Support referencing other top-level rule properties
            # This technically may not work if there is a top-level rule property with the same name
            # as an es result key, since it would have been matched in the lookup_es_key call above
            for i, text_value in enumerate(alert_text_values):
                if text_value is None:
                    alert_value = self.rule.get(alert_text_args[i])
                    if alert_value:
                        alert_text_values[i] = alert_value
            alert_text_values = [missing if val is None else val for val in alert_text_values]
             # 单字段长度判断
            if len(alert_text_values) > 500:
                alert_text_values = alert_text_values[:500]+"..."
            alert_text = alert_text.format(*alert_text_values)
        elif 'alert_text_kw' in self.rule:
            kw = {}
            for name, kw_name in list(self.rule.get('alert_text_kw').items()):
                val = lookup_es_key(self.match, name)

                # Support referencing other top-level rule properties
                # This technically may not work if there is a top-level rule property with the same name
                # as an es result key, since it would have been matched in the lookup_es_key call above
                if val is None:
                    val = self.rule.get(name)
                kw[kw_name] = missing if val is None else val
            alert_text = alert_text.format(**kw)
        self.text += alert_text

从 2020-06-23 13:27 CST 到 2020-06-23 13:28 CST 产生了 88 次 错误日志
> 时间: 2020-06-23 13:28 CST
> 服务名: xxxx
> 项目名: XXX
> 方法 getTableList
> 名称: 促销活动 - 促销活动管理