Integrate with External Ticketing Services

You can easily configure Express to send alert or incident notifications to an external webhook. The following sections describe two example workflows.

Send alerts or incidents to Slack

You can send alerts or incidents to Slack using the Slack API. The following steps describe the workflow.

In Slack:

  1. Go to your Slack app and create a new channel with a descriptive name such as express-incidents.

  2. Log in to your organization's Slack site and create a new Slack bot with a descriptive name such as express-bot.

  3. Make sure that the bot is running in the new channel you just created.

  4. Copy/paste the API key for the bot into a text file.

In Express:

Go to Go to Integrations > Outbound Integrations > Webhook and set up a new integration as follows:

  • Type: Incident (recommended)

  • URL: https://slack.com/api/chat.postMessage

  • Authorization:

    • Authorization = Bearer Token

    • Paste the API key for the Slack bot into the field provided.

  • Headers: Add the following key-value pair:

    Content-type = application/json

  • Body: Enter a JSON structure in the following format. You can use Incident Labeler tags to customize the the "text" description that appears in Slack.Incident labeler

    {"channel":"<destination-slack-channel>", "text" : "incident $description"}

Send alerts to Moogsoft AIOps

You can set up a webhook to send alerts to Moogsoft AIOps.

  1. Go to the Moogsoft AIOps UI > Integrations > Webhook and verify that you have an incoming webhook defined.

  2. Go to the Express UI > Integrations > Outbound Integrations > Webhook page and set up a new integration as follows:

    • Type: Alert

    • URL: The URL of the Moogsoft AIOps webhook

    • Authorization

      • Type: Basic Auth

      • Paste the Base 64 Auth header from the Moogsoft AIOps webhook into the field provided.

    • Headers: Add the following key-value pair:

      Content-type = application/json

    • Body: Enter a JSON structure in the following format.

      { "severity":"$severity", "custom_info.service":"$service", "manager":"$manager", "agent_time":"$time", "signature":"$dedupe_key", "description":"$description", "external_id":"Moogsoft Express", "source_id":"$alias", "source":"$source", "type":"$check", "class":"$class" }