Azure Webhook

You can configure the Azure webhook to post notifications to a custom integration in Moogsoft when events of interest occur.

Before you begin

This integration was validated with Azure Common Alert Schema alertContextVersion 1.0.

Before you start to set up your integration, make sure:

  • You have an active Azure account.

  • You have the necessary permissions to create alerts and notifications channels in Azure

  • Azure can make requests to external endpoints over port 443. This is the default.

  • You have created an API key and have access to a copy of it.

Configure the integration in Moogsoft

To configure the integration:

  1. Click Data Config > Ingestion Services.

  2. Under Ingestion Services, click Create your own integration.

  3. Click ADD NEW INTEGRATION.

  4. In the MOOGSOFT ENDPOINT field, provide a unique integration name.

    You can give it the same name as the target application or customize the name according to your business needs.

  5. In the API DESCRIPTION field, enter a description (optional) of the purpose for the API or other information relevant to your business needs.

  6. Under DATA TYPE, select Events.

  7. Click Save.

The custom API is now provisioned.

Note

Leave this browser tab open as you will use it later on in the procedure.

Note

See Create your own integration for additional help.

Define the webhook in Azure

To create a new webhook in Azure, do the following:

  1. Log in to Azure.

  2. Go to Monitor.

  3. Click Alerts from the side menu.

  4. Click Manage Actions.

  5. Click Add action group.

  6. Select Subscription.

  7. Select Resource group.

  8. Create Action group name.

  9. Select Actions.

  10. Under the Action type menu, select Webhook.

  11. Create Name for Webhook.

  12. Copy your integration endpoint URL.

    The endpoint displays in Moogsoft under Data Config > Ingestion Services > Create Your Own Integration > <Your Integration> > Configuration Information after you save your integration

    Example:

    https://api.moogsoft.ai/express/v1/integrations/custom/cc11a9e714d1/your_application

  13. Copy your Moogsoft API key.

  14. Enter the URL using the Moogsoft API key and endpoint URLin the following format:

    https://APIKEY@MOOGSOFT ENDPOINT

    Example: https://XXXYYYZZZ@api.dev.moogsoft.cloud/express/v1/integrations/events

  15. For Enable the common alert schema,select Yes.

  16. Click Review + create.

  17. Click Create.

Map Azure data to event fields

To map Azure data to event fields in Moogsoft, do the following:

  1. Go back to your Moogsoft tab.

    If you closed your tab, navigate to the Map your Data section of your integration:

    1. Click Data Config > Ingestion Services.

    2. Click Create your own integration.

    3. Click the custom integration that you created in the first part of this procedure.

  2. Under Map Your Data, click the received payload to view the fields.

  3. Scroll down and map the source fields from Azure to target fields relevant in Moogsoft.

    The mappings for SourceDescriptionServiceCheck and Severity in the following table should work for most cases, but you may prefer to map the fields according to your own business needs.

    • Click Add a Mapping to add new rows for additional mappings.

    • To add a default value, click inside a field, scroll to the end of the list of possible source fields, and then click Default Value. You can then type in the default text to display.

    • To create a Tag: mapping in the Moogsoft Target Fields column, click inside a field and then click Add Tag.

    • After creating a mapping, click Add to save it.

    NOTE: For additional information on Azure payloads, see Common alert schema definitions.

    Azure Source Fields

    Moogsoft Target Fields

    data.essentials.alertTargetlDs[0]

    Source

    data.alertContext.condition.allOf[0].dimentions[0]name

    Description

    data.alertContext.condition.allOf[0].metricName

    Check

    data.essentials.severity

    Severity

    data.essentials.monitorCondition

    Tag: condition

    data.essentials.monitoringService

    Service

    Azure

    (Default Value)

    Class

  4. Click Map Values and map the following severity values:

    Source Fields

    Moogsoft Severity

    Sev1

    Major

    Sev2

    Minor

    Sev5

    Unknown

    Sev3

    Warning

    *

    Clear

    Sev0

    Critical

    Note

    Azure does not contain an equivalent mapping for Clear.

    Click Save.

  5. Scroll down to the Set Your Deduplication Key section and then click TEST DEDUPLICATION KEY.

  6. Click SAVE AND ENABLE.