Configuration Reference — Aurora Sentinel

Sentinel is configured via a sentinel.yml file mounted into the container, combined with environment variables for secrets.

Minimal configuration

Mount your config file at /etc/sentinel/sentinel.yml:

docker run -d \
  --name aurora-sentinel \
  -p 4000:4000 \
  -e AURORA_LICENSE=your-license-key \
  -v /path/to/sentinel.yml:/etc/sentinel/sentinel.yml \
  selectred/aurora-sentinel:latest

sentinel.yml reference

targets:
  - name: production
    url: https://your-aurora-instance.example.com
    api_key: ${TARGET_API_KEY}

alerts:
  channels:
    - type: email
      to: ops@example.com
    - type: slack
      webhook_url: ${SLACK_WEBHOOK_URL}

rules:
  - name: failed_logins
    threshold: 5
    window: 300s
    severity: high

  - name: config_drift
    severity: critical

Environment variables

VariableDescription
AURORA_LICENSELicense key (required)
TARGET_API_KEYAPI key for the monitored Aurora instance
SLACK_WEBHOOK_URLSlack webhook for alert delivery
SMTP_HOSTSMTP server for email alerts
SMTP_USERSMTP username
SMTP_PASSSMTP password

Severity levels

LevelMeaning
infoInformational — logged but no alert sent
lowAlert sent but no escalation
mediumAlert sent with 1-hour escalation
highAlert sent with 15-minute escalation
criticalImmediate alert on all channels

Multiple targets

You can monitor multiple Aurora instances from a single Sentinel deployment:

targets:
  - name: staging
    url: https://aurora-staging.example.com
    api_key: ${STAGING_API_KEY}
  - name: production
    url: https://aurora-prod.example.com
    api_key: ${PROD_API_KEY}

Related