Assign alert to appropriate team selected from JSM custom field

[Sergei Gridnevskii]

Is there a way to select a Team in Alert using Jira Service Management  integration and custom field in original service request?

I can configure a separate web hook for each team but it looks like an overkill for me.

I have about 10 teams in OpsGenie and want a customer to select a team when he creates a Jira Service Request on portal.

[Darryl Lee · Accepted solution]

Hello @Sergei Gridnevskii ,

This is Darryl, Opsgenie Support. I am here to help. 😃

Understand that you would like to set up the team auto-allocation for the Opsgenie alerts created by the Jira Service Management integration instead of having multiple Webhooks.

There are 2 workarounds that I can think of as attached below, hope this will be helpful.

Solution 1

Steps

1. Start with opening your Jira Service Management project and adding a custom field called Responder Team.
   1. Click the  icon in the top right-hand corner then Issues
   2. Click Custom fields
   3. Click Create custom field
   4. Choose Select List (Single choice)
   5. Name it Responder Team
   6. Your options are your responder team names defined in Opsgenie
   7. Add the custom field to the necessary screen (for example adding it to the create screen for your project)
2. Now navigate to Project Automation within Jira Service Management

[Darryl Lee]

Hi @Sergei Gridnevskii ,

Sorry that due to the paragraph limitation, I couldn't provide you with the full steps here.

Please reach out to us by creating a Support Request via this link.

Sincerely sorry for the inconvenience.

Kind regards,
Darryl Lee
Opsgenie Support

[Noah Miles]

This solution looks very useful for me, too.  Could it be shared?

[Darryl Lee · Accepted solution]

Hi @Noah Miles & @Tom Jörg,

Here I documented the steps in a PDF file as attached to this link.

Please let us know if it's helpful in your operation.

Thank you.

Kind regards,
Darryl Lee
Support Engineer, Atlassian

[Tom Jörg]

Thank you for following this up @Darryl Lee ! This will certainly be helpful.

Kind regards,
Tom

[Darryl Lee]

Hey Tom,

Glad to know this is helpful on your end.

Have a great day and enjoy Opsgenie. 😀

Kind regards,
Darryl Lee
Support Engineer, Atlassian

[Noah Miles]

Thanks!  Very helpful.

[Tom Jörg]

Hi @Darryl Lee 

I would also be very interested in your solution to this problem. Is there any chance that you publish the missing steps somewhere with public access? Or should I create a support request as well? Just asking because I might not be the last one to do so. ;-)

Kind regards, 
Tom

[Rafael Meira]

This is the complete answer:

There are 2 workarounds that I can think of as attached below, hope this will be helpful.

Solution 1

Steps

1. Start with opening your Jira Service Management project and adding a custom field called Responder Team.

1. Click the icon in the top right-hand corner then Issues

1. Click Custom fields

1. Click Create custom field

1. Choose Select List (Single choice)

1. Name it Responder Team

1. Your options are your responder team names defined in Opsgenie

1. Add the custom field to the necessary screen (for example adding it to the create screen for your project)

1. Now navigate to Project Automation within Jira Service Management

1. Create a Trigger that will be Field value changed and the fields to monitor is your newly created custom field Responder Team
   Unable to render embedded object: File (Bxi93Nu6VZkgAAAAAElFTkSuQmCC) not found.

1. The next step in the automation is Create variable. Give it a Variable name of Responder Team and the Smart value is {Unknown macro: {issue.customfield_#####.value}}

ℹ️To find your custom fields ID you can create a new ticket in Jira Service Management with the custom field defined in the creation of the ticket. Once created navigate to https://<your_Jira_site>t/rest/api/3/issue/issuekey which will show you something that looks like this. Look for the customfield_##### that relates to the ResponderTeam you have created.

For example:
Unable to render embedded object: File (AAAAAElFTkSuQmCC) not found.

Unable to render embedded object: File (FBBRgIgAAAABJRU5ErkJggg==) not found.

1. Now that the Variable has been created let's log this action, this step is not necessary but good practice
   Unable to render embedded object: File (PDxQ9SgAIUoAAFKEABClCAAhSgAAUoQAEKUIACFKAABShAAQpQgAIUoAAFKEABClCAAhSgAAUoQAEKUIACFKAABShAAQpQgAIUoAAFKPDoAjLIsuRXVvj5avcXIavbz36hEz8l mT4aaZ9cuLnoz9U3JICFKAABShAAQpQgAIUoAAFKEABClCAAhSgAAUoQAEKUIACFKAABShAAQpQgAIUoAAFKEABClCAAhSgAAUoQAEKUIACFKAABShAgb9d4P8DFeD7TTOKviQAAAAASUVORK5CYII=) not found.
2. Now, this is where the magic happens! Let's Send web request to Opsgenie to add a responder to the alert. The documentation behind this action can be found here Alert API
   a. Web request URL: https://api.opsgenie.com/v2/alerts/issue.key/responders?identifierType=alias
   b. Headers -
   Name: Content-Type
   Value: application/json

Name: Authorization
Value: GenieKey API key XXX-XXX-XXX
(This is the API key defined in Opsgenie, I would suggest using the default API key here)

c. HTTP Method: Post
d. Web request body: Custom
e: Custom data:
{"responder": {"name":"{{ResponderTeam","type":"team"},"user":"Jira Automation","source":"Jira Service Management","note":"Action executed via Jira Automation"}}}

Unable to render embedded object: File (ASkv5B4sWLeXAAAAAElFTkSuQmCC) not found.

Result

1. Create a ticket in Jira Service Management and assign the responder team to be DailyBugle_Team.
   Unable to render embedded object: File (29mAAQYYYIABBhhggAEGGGCAAQYYYIABBhhggAEGGGCAAQYYYIABBhhggIHMgOBGcCS4YoABBhhggAEGGGCAAQYYYIABBhhggAEGGGCAAQYYYIABBhhggAEGGCgMCG6KsVRcWcVlJzsxwAADDDDAAAMMMMAAAwwwwAADDDDAAAMMMMAAAwwwwAADDDDAwGQDghvBjUKNAQYYYIABBhhggAEGGGCAAQYYYIABBhhggAEGGGCAAQYYYIABBhhgoDAguCnGmlxe U1ZyAADDDDAAAMMMMAAAwwwwAADDDDAAAMMMMAAAwwwwAADDDDAAAMMZAbWcb3b2YABBhhggAEGGGCAAQYYYIABBhhggAEGGGCAAQYYYIABBhhggAEGGGCAgczAOq5nOxswwAADDDDAAAMMMMAAAwwwwAADDDDAAAMMMMAAAwwwwAADDDDAAAMMMJAZENwIjgRXDDDAAAMMMMAAAwwwwAADDDDAAAMMMMAAAwwwwAADDDDAAAMMMMAAA4UBwU0xloorq7jsZCcGGGCAAQYYYIABBhhggAEGGGCAAQYYYIABBhhggAEGGGCAAQYYmGzgByEPmq1DYsoTAAAAAElFTkSuQmCC) not found.
   Unable to render embedded object: File (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 BAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAIEj4BBygMQECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgZqAQ0htEX0IECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAkfAIeQAiQkQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECNQGHkNoi hAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIEjoBDyAESEyBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgRqAg4htUX0IUCAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgcgQGJNB6HuYZvgQAAAABJRU5ErkJggg==) not found.
2. Want to add a second responder team to this alert? Simply change the Responder team on the JSM ticket.
   Unable to render embedded object: File (dFjL902nN TziccT lzwuePD8wL0zenxee2bXhe6ZnwOQIIIIAAAggggAACz6tA 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 vN62KS16a5AAAAAElFTkSuQmCC) not found.
   Unable to render embedded object: File (B81qyAtWD7qDQAAAABJRU5ErkJggg==) not found.

Solution 2

This solution is to leverage the Advanced Integration Settings.

The steps and screenshots are based on Splunk integration, the same logic applies to all kinds of integrations.

Steps

1. Navigate to Settings > Configured integrations > your Splunk integration.
2. Please select the "Assigned to Team" section to be "[No Team]", this will enable the Responders field to pop up in the next step.
   Unable to render embedded object: File (aj zc10H5rgGD7SVrxOC0CCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCESswP8HxTnbxUcNmzgAAAAASUVORK5CYII=) not found.
3. On the same page, click the button “Advanced“ to enter the Advanced integration settings page.
   Unable to render embedded object: File (A4PDjffguBShAAQpQgAIUoAAFKEABClCAAhSgAAUoQAEKUIACFKAABShAAQpQgAIUoAAFKEABClCAAhSgAAV FgIMDv8slpGToAAFKEABClCAAhSgAAUoQAEKUIACFKAABShAAQpQgAIUoAAFKEABClCAAhSgAAUoQAEKUIACFKDA4wX H9otXeVFhyrSAAAAAElFTkSuQmCC) not found.
4. Access the Create Alert action and configure the Filter to define what are the conditions/criteria that are going to match and trigger this action and fill in the wanted teams in the Responders field.

In this way, when there is an alert created by this integration matching this Create Alert action, it will be auto-assigned to the teams listed in the Responders field.

For example, I expect the data from my Splunk side which contains the string “A and B“ in the “Server Host“ key to trigger this Create Alert action and assign the alert to Team A and B.
Unable to render embedded object: File (JFOJECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBLIJKCBk26h5CBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIBAgIACQgC6IwkQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAQDYBBYRsGzUPAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAIEFBACEB3JAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQyCaggJBto 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 YhQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIBAgoIAeiOJECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAEC2QQUELJt1DwECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQCBAQAEhAN2RBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIEAgm8AnerdXYronMs4AAAAASUVORK5CYII=) not found.

1. To achieve dynamic automation, you may click the + icon to add as many Create Alert actions as you need.

For example, I would like to have another Create Alert action to match the data from my Splunk side which contains the string “Demo“ in the “Server Host“ key to trigger this Create Alert action and assign the alert to the Demo Team.

Unable to render embedded object: File (2q58gcZLH9utsnD3qduZv31FkLoqure9Cpc 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) not found.
In this way, when there are multiple data coming from my Splunk side, Opsgenie will try to match the filters that these two Create Alert actions have to trigger the creation and dynamically assign the alerts to different teams as defined.

1. Please note that Opsgenie will start following the sequence to try each filter of the actions, from the Ignore to Add Note, so the order of the actions is very important while configuring.

You may think of it’s an IF-ELSEIF-ELSE condition.
Unable to render embedded object: File (SsPOU6sa0IAGNKABDWhAAxrQgAY00FADBpgLvcPq QQIECBAgAABAgTswKwBAgQIECBAgAABAgQIFCxggNmCVUMLVh7ThwY0oAENaEADGtCABjSgAQ1oQAMaKK0GDDAXfIvVAQQIECBAgAABAgTswKwBAgQIECBAgAABAgQIFCpggLm0FqAsOLreGtCABjSgAQ1oQAMa0IAGNKABDWhAAw01YIC50Dusnk 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 r5BAgQIECAAAECBOzArAECBAgQIECAAAECBAgULGCA2YJVQwtWHtOHBjSgAQ1oQAMa0IAGNKABDWhAAxoorQYMMBd8i9UBBAgQIECAAAECBOzArAECBAgQIECAAAECBAgUKmCAubQWoCw4ut4a0IAGNKABDWhAAxrQgAY0oAENaEADDTVggLnQO6yeT4AAAQIECBAgQMAOzBogQIAAAQIECBAgQIBAwQIGmC1YNbRg5TF9aEADGtCABjSgAQ1oQAMa0IAGNKCB0mrAAHPBt1gdQIAAAQIECBAgQMAOzBogQIAAAQIECBAgQIBAoQIGmEtrAcqCo utAQ1oQAMa0IAGNKABDWhAAxrQgAY00FADBpgLvcPq QQIECBAgAABAgTswKwBAgQIECBAgAABAgQIFCxggNmCVUMLVh7ThwY0oAENaEADGtCABjSgAQ1oQAMaKK0GDDAXfIvVAQQIECBAgAABAgTswKwBAgQIECBAgAABAgQIFCpggLm0FqAsOLreGtCABjSgAQ1oQAMa0IAGNKABDWhAAw01YIC50Dusnk AAAECBAgQIEDADswaIECAAAECBAgQIECAQMECBpgtWDW0YOUxfWhAAxrQgAY0oAENaEADGtCABjSggdJqwABzwbdYHUCAAAECBAgQIEDADswaIECAAAECBAgQIECAQKECBphLawHKgqPrrQENaEADGtCABjSgAQ1oQAMa0IAGNNBQAwaYC73D6vkECBAgQIAAAQIE7MCsAQIECBAgQIAAAQIECBQsYIDZglVDC1Ye04cGNKABDWhAAxrQgAY0oAENaEADGiitBgwwF3yL1QEECBAgQIAAAQIE7MCsAQIECBAgQIAAAQIECBQqYIC5tBagLDi63hrQgAY0oAENaEADGtCABjSgAQ1oQAMNNWCAudA7rJ5PgAABAgQIECBAwA7MGiBAgAABAgQIECBAgEDBAgaYLVg1tGDlMX1oQAMa0IAGNKABDWhAAxrQgAY0oIHSasAAc8G3WB1AgAABAgQIECBAwA7MGiBAgAABAgQIECBAgEChAgaYS2sByoKj660BDWhAAxrQgAY0oAENaEADGtCABjTQUAMGmAu9w r5BAgQIECAAAECBOzArAECBAgQIECAAAECBAgULGCA2YJVQwtWHtOHBjSgAQ1oQAMa0IAGNKABDWhAAxoorQYMMBd8i9UBBAgQIECAAAECBOzArAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBEpD4P Uxsf0KQkQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQKAYBA8zFcBWcAwECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAIESETDAXCIX2sckQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgUAwCBpiL4So4BwIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIlImCAuUQutI9JgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAoBgEDDAXw1VwDgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgRKRMAAc4lcaB TAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAQDEIGGAuhqvgHAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAiUiIAB5hK50D4mAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgWIQMMBcDFfBORAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAoEQEDzCVyoX1MAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAsUgYIC5GK6CcyBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBQIgIGmEvkQvuYBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBIpBwABzMVwF50CAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECgRAQMMJfIhfYxCRAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBSDgAHmYrgKzoEAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIBAiQgYYC6RC 1jEiBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECgGAQPMxXAVnAMBAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgACBEhEwwFwiF9rHJECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIFAMAgaYi EqOAcCBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECJSJggLlELrSPSYAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQKAYBAwwF8NVcA4ECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIESkTAAHOJXGgfkwABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgEAxCBhgLoar4BwIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIlIiAAeYSudA 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 G8D0TgcvA6qWAAAAABJRU5ErkJggg==) not found.

If the data received by Opsgenie doesn’t match any of them, it will be dropped and not trigger any actions, and you will find a similar entry in the Settings > Logs.
Unable to render embedded object: File (B7o4slR2v zwAAAAAElFTkSuQmCC) not found.