Working alertmanager source. Starting playbook to clean logfiles

playbooks/clean_logs.yml

@@ -0,0 +1,23 @@
+---
+- name: Clean log directory
+  hosts: all
+  tasks:
+    - name: Find files in directory ending in .log or .log.tgz larger than 1GB
+      ansible.builtin.find:
+        paths: /var/log
+        patterns: '*.log,*.log.tgz'
+        size: 1g
+      register: logfiles
+
+   #  - name: Copy files to archive server
+   #    ansible.builtin.copy:
+   #      src: "{{ item.path }}"
+   #      dest: "{{ archive_server_path }}/{{ item.path | basename }}"
+   #    delegate_to: "{{ archive_server }}"
+   #    loop: "{{ logfiles.files |flatten(levels=1) }}"
+
+    - name: Delete files
+      ansible.builtin.file:
+        path: "{{ item.path }}"
+        state: absent
+      loop: "{{ logfiles.files | flatten(levels=1) }}"

rulebooks/alertmanager_listener.yml

@@ -10,15 +10,21 @@
     - name: Run Template
       condition:
         all:
-          - event.alert.labels.org == "OYS"
+          - event.alert.labels.org == "OYS" and event.alert.status == "firing" and event.alert.labels.alertname == "root filesystem over 80% full"
-          - event.alert.labels.alertname == "root filesystem over 80% full"
+      actions:
-          - event.alert.labels.mountpoint == '/'
+        - print_event:
-      action:
+            pretty: true
-        run_job_template:
+        - run_job_template:
-          name: Demo - Clean Log Directory
+            name: Demo - Clean Log Directory
-          organization: OYS
+            organization: OYS
-          job_args:
+            job_args:
-            extra_vars:
+              extra_vars:
-              alertmanager_annotations: "{{ event.annotations }}"
+                alertmanager_annotations: "{{ event.alert.annotations }}"
-              alertmanager_generator_url: "{{ event.generatorURL }}"
+                alertmanager_generator_url: "{{ event.alert.generatorURL }}"
-              event_mountpoint: "{{ event.mountpoint }}"
+                event_mountpoint: "{{ event.alert.labels.mountpoint }}"
+                alertmanager_instance: "{{ event.alert.labels.instance }}"
+    - name: Test Contact Point
+      condition: event.alert.labels.alertname == "TestAlert" or event.alert.labels.org == "OYS"
+      actions:
+        - print_event:
+            pretty: true