{
	"escalations": {			// <- a list of policies to be used by the escalations
		"demo": [
			{
				"type": "console" // <- will log every event that demo is called on
			},
			{
				"type": "pager_duty", // <- creates a pagerduty event
				"key": "mytestkeyXYZ"
			},
			{
				"type": "email", // <- send an email directly via smtp
				"source_email": "[email protected]", 
				"dest_emails": [
					"[email protected]"
				],
				"host": "smtp.foo.com",
				"port": 587,
				"user": "bar",
				"password": "baz",
			}
		]
	},
	"event_providers": [
		{
			"type":"tcp", // will listen for incomming tcp connection
			"listen":"0.0.0.0:8080" // on all interfaces with port 8080
			"encoding": "msgp" // expecting msgpack encoding
		},
		{
			"type": "http", // will serve http 
			"listen": "0.0.0.0:8081", // on all interfaces with port 8081
			"encoding": "json" // expecting json encoding

		}
	],
	"escalations_dir": "/etc/bangarang/alerts/" // <- dir that holds individual alert configs
}

{
		"match": {		// <- will pass the event on if any of the match cases are satisifed
			"service": "my.service"
		},
		"not_match": { 	// <- will pass the event on only if it doesn't match these values
			"host": "node.*host.com" 
		},
		"crit": { 		// <- the event will only be passed if the metric
						// 	   meets all of the following conditions
			"greater": 200.0,
			"less": 12.0,
			"exactly": 25.0,
			"occurences": 3 // <- will only go critical if this happens 3 times
			"escalation": "demo" // <- will be passed on to this escalation policy
		},
		"warn": {
			"greater": 200.0,
			"less": 12.0,
			"exactly": 25.0,
			"occurences": 2 // <- will go warning if it happens twice
			"escalation": "demo" // <- will be passed on to this escalation policy
		}
	}
}

{
		"match": {		// <- will pass the event on if any of the match cases are satisifed
			"service": "my.service"
		},
		"group_by": {
			"host": "\\w+\\.(?P<deployment>\\w+)\\.\\w+" // <- will aggregate by the second element of the host name
		},
		"crit": { 		// <- the event will only be passed if the metric
						// 	   meets all of the following conditions
			"aggregation": {
				"window_length": 60 // <- number of seconds the aggregation window is open
			},
			"greater": 200.0,
			"less": 12.0,
			"exactly": 25.0,
			"occurences": 3 // <- will only go critical if this happens 3 times
			"escalation": "demo" // <- will be passed on to this escalation policy
		}
	}
}