ElastAlert 2
ElastAlert 2 is a simple framework for alerting on anomalies, spikes, or other patterns of interest from data in Elasticsearch.
network-security-monitoringBlue Team
Toolnetwork-security-monitoringblueLinuxSecurity OnionPlatforms: Linux · Last verified September 6, 2026
ElastAlert 2 is a simple framework for alerting on anomalies, spikes, or other patterns of interest from data in Elasticsearch.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
Bundled with Security Onion. See Security Onion's official tool documentation and upstream website linked above for details.
