How to Find the Incoming Data for an Opsgenie Alert

[#1]

The incoming data received from an integrated tool can be very helpful for troubleshooting issues or structuring your alert fields properly. 

From time to time, you may need to figure out why certain data is or isn't present on an alert. You may also need to add additional payload fields to an alert. In these cases, you'll want to take a look at what Opsgenie is receiving from the integrated tool in question. 

Note: You will need either Owner, Admin, or custom access to view the system logs for this.

First, you'll want to view the Activity Log tab on the alert in question.
​

Toward the bottom of the Activity log, you'll see an entry that starts with 'Alert created via'. This won't always be the first entry on the activity log, but it will be close to it. In this entry, you'll see the 'incomingDataId'. You'll want to highlight the ID and copy it to your clipboard.
​

Next, you'll navigate to Settings > Logs. In the logs, you'll want to make sure the time filter is set to include the time the alert came in. Then, you'll search for the incoming data ID in quotation marks.

This search should return a number of log entries. 

To see the payload we are receiving before it is parsed by Opsgenie, you'll look for the entry with 'Received integration request' in the title. Please note that if the payload is received via API, then this entry will not be present.

Additionally, the payload in the logs gets truncated, so there may be more info that isn't shown here. The simplest way to see the full payload in these cases is to add {{_payload}} to one of the alert fields on the integration.

This doc details how to pull extra fields from the payload and put them on an alert in Opsgenie.

To see the payload as parsed by Opsgenie, you'll want to look at the 'Processed incomingData'. This entry will show the fields that are available as draggable fields on the side of the integration and they information they would contain for this particular alert.

You should also see entries that show which alert action was matched, which alert was created, and any policies that were applied to this alert.

In order to ensure that we continue to provide useful content, please let us know if this Article is helpful (Thumbs Up/Down). Also, to help us improve, feel free to provide additional feedback (directly in the community).