nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Is it possible to trigger an 'action' on Incident creation?

Rodolfo_u03he7

For example, I want to send a message to Slack when an incident is created.

I know the integrations and actions are based on alerts, not incidents. So I was thinking to set up a Webhook outgoing integration when an alert is created and it has the incident-id extra property set, but this condition would match for all responder alerts and I would get multiple Slack messages for the same incident.

Any idea or suggestion?

Thanks

Accepted answers

John M_2hpypf

Hi Rodolfo,

We actually have a completely separate Slack integration just for Incidents. You can find it in the Slack menu item under the Integrations section.

Image 2-3-2022 at 6.16 PM.jpg

All comments

John M_2hpypf

Hi Rodolfo,

We actually have a completely separate Slack integration just for Incidents. You can find it in the Slack menu item under the Integrations section.

Image 2-3-2022 at 6.16 PM.jpg

Rodolfo_u03he7

@John M Thanks for your answer.

Yes, I am aware of the Slack integration for alerting and Slack integration for incident management.

The Slack integration for incident management is great to execute incident actions from Slack, and it works great! But I am looking for a way to send a message to Slack when an Incident is created (no matter the source: integration, manual creation, incident rule).

As I said, I was thinking of an outgoing integration (e.g. Webhook => Slack, AWS SNS outgoing => Lambda => Slack) when an alert is created and it has the extra property `incident-id`, but I would get multiple messages if there is more than one alert for an incident (i.e. more than one Responder).

I could program the logic in the program that sends the message to Slack to identify if a previous message has been sent for a specific incident-id, but I feel there should be an easier way to do what I want.

For example, the Zendesk integration has an option "From an Opsgenie incident, create a Zendesk Ticket.". I am looking for an 'easy' way for "From an Opsgenie incident, send a message to Slack."

John M_2hpypf

The best way to trigger outbound integrations for incidents is to key in on the incident-alert-type field being 'Owner'.

If the incident has a service, the team that owns that service will get an 'Owner' responder alert created, so there should only be one alert and you would avoid the multiple alerts/slack messages issue.

You can filter on a the slack for alerts integration like this:

image (4).png

Rodolfo_u03he7

Thanks @John M!

What about incidents that are not associated to a service?

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

opsgenie

incident