Aggregate alerts

[fjerlov-cs]

Adds aggregate-alerts to humio/cli

➜  cli git:(fjerlov/aggregate-alert) ✗ ./bin/humioctl aggregate-alerts
Manage aggregate alerts

Usage:
  humioctl aggregate-alerts [command]

Available Commands:
  export      Export a aggregate alert <aggregate-alert> in <view> to a file.
  install     Installs a aggregate alert in a view
  list        List all aggregate alerts in a view.
  remove      Removes a aggregate alert.
  show        Show details about a aggregate alert in a view.

/Users/fjerlov/Library/Caches/JetBrains/GoLand2023.3/tmp/GoLand/___list aggregate-alerts list DemoView
                 ID                |      NAME       |  DESCRIPTION  | ACTION NAMES | LABELS | ENABLED | THROTTLE FIELD | THROTTLE TIME SECONDS | SEARCH INTERVAL SECONDS | QUERY TIMESTAMP TYPE | TRIGGER MODE  |      RUN AS USERID       | QUERY OWNERSHIP TYPE  
+----------------------------------+-----------------+---------------+--------------+--------+---------+----------------+-----------------------+-------------------------+----------------------+---------------+--------------------------+----------------------+
  SvhhCj21ZV9dRkQd0FBohuCeUVQly77a | aggregate-alert | asdakmsdasd-2 | testing      | label2 | false   | asd            |                  7200 |                    7200 | EventTimestamp       | ImmediateMode | pMeYeiIlF3NljnMAIcEcRnUK | User                  

/Users/fjerlov/Library/Caches/JetBrains/GoLand2023.3/tmp/GoLand/___show aggregate-alerts show DemoView aggregate-alert
                       ID | SvhhCj21ZV9dRkQd0FBohuCeUVQly77a  
                     Name | aggregate-alert                   
              Description | asdakmsdasd-2                     
             Query String | foo=* bar=* | count()             
  Search Interval Seconds | 7200                              
                  Actions | testing                           
                   Labels | label2                            
                  Enabled | false                             
           Throttle Field | asd                               
    Throttle Time Seconds | 7200                              
     Query Timestamp Type | EventTimestamp                    
             Trigger Mode | ImmediateMode                     
           Run As User ID | pMeYeiIlF3NljnMAIcEcRnUK          
     Query Ownership Type | User                              

Process finished with the exit code 0

aggregate-alert.yaml

name: aggregate-alert
description: asdakmsdasd-2
queryString: foo=* bar=* | count()
searchIntervalSeconds: 7200
actionNames:
- testing
labels:
- label2
enabled: false
throttleField: asd
throttleTimeSeconds: 7200
queryOwnershipType: User
triggerMode: ImmediateMode
queryTimestampType: EventTimestamp
runAsUserId: pMeYeiIlF3NljnMAIcEcRnUK

[jespermbyskov]

LGTM

[fjerlov-cs]

@danielamkaer with the new changes:

show:

/Users/fjerlov/Library/Caches/JetBrains/GoLand2024.1/tmp/GoLand/___show aggregate-alerts show DemoView aggregate-alert
                       ID | hooUSUSV36H3TP9VXJzi69ix55EaoYGQ  
                     Name | aggregate-alert                   
              Description | test 2 3                          
             Query String | foo=* bar=2 | count()             
  Search Interval Seconds | 3600                              
                  Actions | testaction, testing               
                   Labels | label1, label2, label3            
                  Enabled | true                              
           Throttle Field | test                              
    Throttle Time Seconds | 3600                              
     Query Timestamp Type | IngestTimestamp                   
             Trigger Mode | ImmediateMode                     
           Run As User ID |                                   
     Query Ownership Type | Organization     

export:

name: aggregate-alert
description: test 2 3
queryString: foo=* bar=2 | count()
searchIntervalSeconds: 3600
actionNames:
- testaction
- testing
labels:
- label1
- label2
- label3
enabled: true
throttleField: test
throttleTimeSeconds: 3600
queryOwnershipType: Organization
triggerMode: ImmediateMode
queryTimestampType: IngestTimestamp

List:

/Users/fjerlov/Library/Caches/JetBrains/GoLand2024.1/tmp/GoLand/___list aggregate-alerts list DemoView
                 ID                |      NAME       | DESCRIPTION |    ACTION NAMES     |         LABELS         | ENABLED | THROTTLE FIELD | THROTTLE TIME SECONDS | SEARCH INTERVAL SECONDS | QUERY TIMESTAMP TYPE | TRIGGER MODE  | RUN AS USERID | QUERY OWNERSHIP TYPE  
+----------------------------------+-----------------+-------------+---------------------+------------------------+---------+----------------+-----------------------+-------------------------+----------------------+---------------+---------------+----------------------+
  hooUSUSV36H3TP9VXJzi69ix55EaoYGQ | aggregate-alert | test 2 3    | testaction, testing | label1, label2, label3 | true    | test           |                  3600 |                    3600 | IngestTimestamp      | ImmediateMode |               | Organization