AlertBridge - On-Call Alert Routing LogLens

AlertBridge: single container, port 8081, state in /data (SQLite) or Postgres. Full guide: https://vercomloglens.com/alertbridge/docs 

PREREQUISITES

• Active Marketplace subscription.
• AWS CLI v2, Docker 20.10+ or ECS Fargate.
• IAM: ecr:GetAuthorizationToken, ecr:BatchGetImage.
• VPC: private task subnets, public ALB subnets, NAT for outbound 443.
• Storage: volume/EFS at /data or RDS. SG: ALB 80/443; ALB to task 8081; egress 443.

IMAGE: 709825985650.dkr.ecr.us-east-1.amazonaws.com/vercom-loglens/alertbridge:1.0.0

STEP 1: PULL

export AWS_REGION=us-east-1 export IMAGE_URI=709825985650.dkr.ecr.us-east-1.amazonaws.com/vercom-loglens/alertbridge:1.0.0 aws ecr get-login-password --region $AWS_REGION | docker login --username AWS --password-stdin $(echo $IMAGE_URI | cut -d/ -f1) docker pull $IMAGE_URI

STEP 2A: DOCKER

docker volume create alertbridge-data docker run -d --name alertbridge --restart unless-stopped -p 8081:8081 -v alertbridge-data:/data
-e ALERTBRIDGE_HTTP_ADDR=:8081 -e ALERTBRIDGE_DATA_DIR=/data -e ALERTBRIDGE_MIGRATE_ON_START=true
-e ADMIN_EMAIL=admin@example.com  -e ADMIN_PASSWORD='ChangeMe-StrongPassword16'
-e ALERTBRIDGE_INGEST_API_KEY="$(openssl rand -hex 32)" $IMAGE_URI

Prod: Secrets Manager; optional DATABASE_URL for Postgres.

STEP 2B: ECS FARGATE (CLOUDFORMATION)

Launch template on this delivery option. Parameters: ImageURI, AdminEmail, AdminPassword, IngestAPIKey, VpcId, PublicSubnetIds, PrivateSubnetIds. Outputs: LoadBalancerDNS, IngestURL, HealthCheckURL. Or manual task: Fargate 512/1024, port 8081, EFS /data, logs /ecs/alertbridge, ALB /ready:8081.

STEP 3: VERIFY

export HOST=http://LoadBalancerDNS  curl -s $HOST/api/v1/setup/ curl -s -o /dev/null -w "health:%{http_code}\n" $HOST/health curl -s $HOST/ready docker logs alertbridge aws logs tail /ecs/alertbridge --follow

STEP 4: AUTH

JWT=$(curl -s -X POST $HOST/api/v1/auth/login -H "Content-Type: application/json"
-d '{"email":"admin@example.com ","password":"ChangeMe-StrongPassword16"}' | jq -r .token) curl -s $HOST/api/v1/me -H "Authorization: Bearer $JWT" curl -s $HOST/api/v1/dashboard -H "Authorization: Bearer $JWT"

STEP 5: INGEST

INGEST_KEY=<IngestAPIKey from deploy> curl -i -X POST $HOST/api/v1/alerts/ingest -H "Authorization: Bearer $INGEST_KEY"
-H "Content-Type: application/json"
-d '{"source":"curl","title":"Smoke test","severity":"warning","service":"platform","summary":"Verify","external_id":"t1"}' Expect HTTP 201. service tag routes alert to team.

STEP 6: LIFECYCLE

ALERT_ID=<from response> curl -s $HOST/api/v1/alerts -H "Authorization: Bearer $JWT" curl -s -X POST $HOST/api/v1/alerts/$ALERT_ID/ack -H "Authorization: Bearer $JWT" curl -s -X POST $HOST/api/v1/alerts/$ALERT_ID/resolve -H "Authorization: Bearer $JWT" UI Settings: Slack webhook; re-ingest; confirm page.

STEP 7: LOGLENS

LOGLENS_ALERTBRIDGE_URL=http://alertbridge-alb  LOGLENS_ALERTBRIDGE_API_KEY=<INGEST_KEY> LOGLENS_PUBLIC_BASE_URL=https://loglens.example.com 

STEP 8: MONITOR

ECS RunningTaskCount, CPU, memory. ALB UnHealthyHostCount, 5xx on /ready:8081. Logs /ecs/alertbridge. Probe GET /ready every 60s. Alarms: tasks<1, unhealthy>0. Upgrade: new tag, update task def, force deploy, keep /data volume.

ENV: ADMIN_EMAIL, ADMIN_PASSWORD, ALERTBRIDGE_INGEST_API_KEY required. ALERTBRIDGE_HTTP_ADDR=:8081, ALERTBRIDGE_DATA_DIR=/data, ALERTBRIDGE_MIGRATE_ON_START=true. Optional DATABASE_URL, ALERTBRIDGE_JWT_SECRET, ALERTBRIDGE_ESCALATION_INTERVAL=30s.

API: GET /health /ready; POST /api/v1/alerts/ingest; POST /api/v1/auth/login; GET /api/v1/alerts; POST /api/v1/alerts/:id/ack; POST /api/v1/alerts/:id/resolve.

TROUBLESHOOTING

Pull denied: subscription + ECR login. /ready false: logs, /data mount. 401 ingest: Bearer matches INGEST key. ALB unhealthy: SG to 8081, /ready 200.

DOCS: https://vercomloglens.com/alertbridge/docs  | support@vercomloglens.com