nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How do I set the Alias for an alert with SumoLogic integration?

Benj Kamm

I am exploring JSM Standard with OpsGenie Essentials, using the SumoLogic integration (see https://support.atlassian.com/opsgenie/docs/integrate-opsgenie-with-sumo-logic/#Configuration-in-Sumo-Logic).

I need to set an alias on new alerts so that subsequent notifications for the same saved search will not make unneeded noise, but I can't figure out how to do it.

Is there a JSON key I can pass in on the webhook body to set the alias, or some other way to accomplish this? I've tried using `"Alias"` and `"alias"` and neither seems to work.

Thanks!

Accepted answers

John M_2hpypf

Hi @Benj Kamm ,

You can set the alias value by adding "alias" to the payload along with the value you want to send through. For example, if you wanted to send the Query as the alias, your payload would look like this:

{

"AlertName": "{{AlertName}}",

"Description": "{{Description}}",

"action": "create",

"AlertURL": "{{AlertResponseURL}}",

"Query": "{{Query}}",

"QueryURL": "{{QueryURL}}",

"alias": "{{Query}}",

"TriggerTime": "{{TriggerTime}}",

"TriggerTimeRange": "{{TriggerTimeRange}}",

"TriggerCondition": "{{TriggerCondition}}",

"TriggerValue": "{{TriggerValue}}",

"TriggerType": "{{TriggerType}}",

"ResultsJson": "{{ResultsJSON}}",

"DetectionMethod": "{{DetectionMethod}}",

"MonitorType": "{{MonitorType}}",

"NumQueryResults": "{{NumQueryResults}}",

"SourceURL": "{{SourceURL}}"

}

All comments

John M_2hpypf

Hi @Benj Kamm ,

{

"AlertName": "{{AlertName}}",

"Description": "{{Description}}",

"action": "create",

"AlertURL": "{{AlertResponseURL}}",

"Query": "{{Query}}",

"QueryURL": "{{QueryURL}}",

"alias": "{{Query}}",

"TriggerTime": "{{TriggerTime}}",

"TriggerTimeRange": "{{TriggerTimeRange}}",

"TriggerCondition": "{{TriggerCondition}}",

"TriggerValue": "{{TriggerValue}}",

"TriggerType": "{{TriggerType}}",

"ResultsJson": "{{ResultsJSON}}",

"DetectionMethod": "{{DetectionMethod}}",

"MonitorType": "{{MonitorType}}",

"NumQueryResults": "{{NumQueryResults}}",

"SourceURL": "{{SourceURL}}"

}

Benj Kamm

@John M Thanks for the response but that doesn't seem to be working for me.

I've set "alias" as you recommended:

But in OpsGenie, the alias does not appear to be set - it's still random:

and I'm getting lots of duplicated alerts created:

Is there something I'm missing?

John M_2hpypf

Are you sure there is data being sent to that dynamic value?

Can you remove the dynamic field and try a static value, like 'Test' for the 'alias' field?

Are you using the legacy Sumologic integration?

Benj Kamm

Thanks, John. I tried your suggestion and replaced `alias` with a constant field and it's still not working.

Curiously, when I look in the integration log in OG, it shows that field as blank suggesting that no data is coming in: