Feedback / Two-Way Communication

[Robert Williams]

My apologies if this has been answered previously.

I'm curious if there's any options with e-mail integrations to communicate OUTBOUND from Opsgenie actions have been taken.  My specific example is this:

1)  Our SIEM notices event XYZ

2)  A case is created in our SIEM

3)  An alert is generated via E-MAIL to Opsgenie

4)  A member of the team ACKs the alert

5)  I WOULD LIKE A METHOD FOR OPSGENIE TO SEND API CALL OUT TO OUR SIEM.

Note:  There is not currently a built-in integration for our SIEM.

I'm essentially asking if there's any way to achieve two way communication so that Opsgenie can be made to integrate with systems that don't currently have a built-in integration.

I hope that makes sense.

Thanks!

[Muhammad Zeeshan]

Hey @Robert Williams,

You may want to check out Opsgenie's Webhook Integration: https://docs.opsgenie.com/docs/webhook-integration that mostly comes in handy for Outbound communication with tools (Opsgenie -> SIEM for your case) whenever there is no built-in integration for those tools.

You will just need to provide a Webhook URL from your SIEM to the integration settings and it will send a JSON payload to the URL for the actions you take on the alert.

Furthermore, if you would like to understand what the JSON Payloads look like for each action you may find them here: https://docs.opsgenie.com/docs/sample-alert-action-data