Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

AWS Cloudwatch Alerts send to more than one team

Andres Felipe Ruge Quintero
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
September 1, 2022

Hello, 

I configure an SNS Topic with 3 differents subscriptions, for three different teams in Opsgenie. The Alert is sent 3 times but Opsgenie groups the three alerts in one and only assign the alert to one Responder. It doesn´t alert the members of the others two teams.

 

Captura.PNG

 

Thanks for your help!

1 answer

0 votes
Nick H
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
September 1, 2022

Hi @Andres Felipe Ruge Quintero ,

It sounds like your SNS Topic is triggering three different integrations, and the idea is to have all three integrations create an alert per team.

What appears to be happening is the alerts are deduplicating under one alert. Deduplication occurs when the alias of an alert matches the alias of an open Opsgenie alert: https://support.atlassian.com/opsgenie/docs/what-is-alert-de-duplication/

With this example, it's happening immediately at creation. Also important to note that deduplication can occur across multiple integrations. Only the alias needs to match.

To avoid deduplication, you can edit what parses in the alias field under the integration's Advanced tag:

aws1.jpg

 

NOTE - the Advanced tab of an integration is only available on the Opsgenie standalone Standard and Enterprise plans, or the JSM Premium and Enterprise plans.

 

For this use case, you can add a piece of hardcoded data into the alias field of each integration - such as the integration name along with what's already being parsed:

aws2.jpg

 

Another thing to be aware of is the integration uses the alias to close alerts, acknowledge alerts, etc. - so whatever is being using the create alert action's alias should be consistent throughout all of the other integration's actions' alias:

aws3.jpg

 

Once these changes are made, this should avoid deduplication moving forward.

Andres Felipe Ruge Quintero
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
September 2, 2022

Hi @Nick H ,

Thanks for your answer. I don't see the Advanced button enable, so i assume that i dont have the requiered license.

There's any other solution to avoid de duplication?

 

Thanks again.

Nick H
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
September 2, 2022

Unfortunately there isn't much of another option besides upgrading your plan, since you'll only be able to edit the alias under the Advanced tab. 

By default, the Cloudwatch integration defaults to parsing the {{Region}} - {{AlarmName}} into the alias. 

Esteban Gomez Villa
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
October 12, 2022

Hi @Nick H ,

Thanks for your answer. Currently we have plan enterprise and implement a proposed change and 3 alerts were created.

Captura.PNG

 

Is posible to created only one alert with escaletion to the 3 teams? For example (edited image):

 

Captura.PNG 

Nick H
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
October 12, 2022

Hi @Esteban Gomez Villa ,

Yes, that should be possible.

You'd only want to use one AWS integration vs. multiple, and have it global - meaning it's not assigned to a team. This then opens a Responder field within each Create Alert action where you can add the three teams to be responders on the alert like so:

aws1.jpgaws2.jpg

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events