Azure alerts not mapping correctly

[Rob Wetzeler]

I"m using the Common Alert Scheme (https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-common-schema?WT.mc_id=Portal-Microsoft_Azure_Monitoring) from Azure Alerts and have my integration setup as follows:

 

However, I when an alert comes in, its not filling out values properly

[Skyler Ataide · Accepted solution]

Hi there Rob, 

Thanks for reaching out! This appears to be an issue with the payload that is being sent from Azure to Opsgenie. When the 'Common alert schema' option has been toggled on in Azure, this changes the format and structure of the payloads that Azure sends to Opsgenie. You can find out more details on this here: https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-common-schema

Are you able to try switching back to the standard alert schema for this alert type in Azure? To switch to the standard alert schema, this is a setting that needs to be made on the Azure side. You should see an option in the action/webhook definition in Azure that is sending to Opsgenie, and you can toggle the 'Enable the common alert schema' option off. For more details, see this section here: https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-common-schema#through-the-azure-portal

Apologies for any inconvenience that switching back to the standard alert schema in Azure may cause at this time. Since the common alert schema is currently being used and the values in the payload being sent from Azure are not being mapped over to the alert in Opsgenie, this indicates that there is a mismatch in the format. The expected incoming data format is laid out in our documentation as defined in here: https://support.atlassian.com/opsgenie/docs/integrate-opsgenie-with-microsoft-azure/

Best regards,

Skyler

[Rob Wetzeler]

I will turn off the common alert schema flag and see if this fixes the issue.  Thanks!

[Rob Wetzeler]

Quick follow up, changing from using Common Alert Schema flag fixed the issue and the data mapping per the documentation is now working.

[Skyler Ataide]

Great to hear! Thanks for following up with this update.