elastalert: config: disable_rules_on_error: description: Disable rules on failure. global: True run_every: minutes: description: Amount of time in minutes between searches. global: True buffer_time: minutes: description: Amount of time in minutes to look through. global: True old_query_limit: minutes: description: Amount of time in minutes between queries to start at the most recently run query. global: True es_conn_timeout: description: Timeout in seconds for connecting to and reading from Elasticsearch. global: True max_query_size: description: The maximum number of documents that will be downloaded from Elasticsearch in a single query. global: True alert_time_limit: days: description: The retry window for failed alerts. global: True index_settings: shards: description: The amount of shards to use for elastalert. global: True replicas: description: The amount of replicas for the Elastalert index. global: True