How to close alert when Datadog monitor recovers

Question

We are using the Datadog integration and our monitors create alerts by messaging opsgenie-service. However, I can't get things working to close the alert when the datadog monitor recovers. I thought we could just tag opsgenie-close, but it looks like that needs to come out of the event stream and not the alert?

Is there something that we need to set up in OpsGenie to implement this?

Frank Szymanski · Answer

Thanks. We eventually figured it out, but the confusion came from the documentation talking about using opsgenie-acknowledge and opsgenie-close when we really needed to just keep the same opsgenie-service in the monitor.

John M_2hpypf · Answer

Hi @Frank Szymanski ,

Opsgenie closes alerts by matching the alias field of an incoming 'close' payload with the alias of an existing open alert. So, two things need to be true to close an alert via an incoming payload:

* The payload must match the integration's filter for the 'close' action
* The alias must parse to the same value as the value of the open alert being closed

To get the alias to to be the same, you must be sure that both the 'close' and 'create' actions use the same dynamic field or combination of dynamic fields, so that they ultimately parse to the same value.

Here is a screenshot of the 'close' action in the Datadog integration, which must contain the same dynamic fields as the 'create' action: