elastalert: config: disable_rules_on_error: false description: Disable rules on failure. run_every: minutes: 3 description: Amount of time in minutes between searches. buffer_time: minutes: 10 description: Amount of time in minutes to look through. old_query_limit: minutes: 5 description: Amount of time in minutes between queries to start at the most recently run query. es_conn_timeout: 55 description: Timeout in seconds for connecting to and reading from Elasticsearch. max_query_size: 5000 description: The maximum number of documents that will be downloaded from Elasticsearch in a single query. alert_time_limit: days: 2 description: The retry window for failed alerts. index_settings: shards: 1 description: The amount of shards to use for elastalert. replicas: 0 description: The amount of replicas for the Elastalert index.