You're on your way to the next level! Join the Kudos program to earn points and save your progress.
Level 1: Seed
25 / 150 points
1 badge earned
Challenges come and go, but your rewards stay with you. Do more to earn more!
What goes around comes around! Share the love by gifting kudos to your peers.
Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!
Join now to unlock these features and more
I'd like to be able to add context to an alert after it's created. For example, if there's an IP address in the alert I want to be able to automatically populate the alert with a geolookup of the IP that pulls back the country where it's located and put this into the alert. Ideally I'd be able to update the description with this new information, or add this as an extra property if not. If neither of those were possible we could probably also live with having this added as a comment to the alert.
This wouldn't need anything too complex, simply sending a GET request to a URL like:
Is it possible to trigger an API call like this and add the results to the alert?
@James Allen we do this on several alerts in our org; we call it "Alert Enrichment". We use the OEC capability to watch for inbound alerts with key labels on them. The OEC then runs scripts to pull extra information to add to the alert, before it's handled by a human. Some things that we do:
All of these let our associates do faster triage and, ultimately, resolve the issue quickly.
That sounds like the kind of thing we need, and I've been thinking of similar integrations too.
How do you use the OEC to update the alerts? Is that just over raw API calls or is there an integration back to the alert that called the OEC? I've struggled in the past to find much documentation on OEC, do you know of some good documentation anywhere?
Separate question, how have you presented this information within Opsgenie? I've built an HTML table for the description, but it's quite fiddly and would be complicated to have lots of different information in there. I've been creating dynamic hyperlinks to internal dashboards which show more information on the impacted host, but would be better if I could present data cleanly in Opsgenie itself.
@James Allen we just call back to the API to make the changes. There are a couple of ways to do that:
We haven't found much documentation that's helpful, other than the Atlassian help pages.