AlertOps Integration

From Administration > Custom Alert Fields, click Add Alert Type to create a new Alert Type:

Alert Type: Moogsoft Alert

These are the basic fields required by the integration and can be extended but should be removed.

If required, create a new Escalation Rule by navigating to Escalation Rules and then clicking Add Escalation Rule. If a suitable escalation rule exists, use it in the following steps.

The Escalation Rule must use the new Alert Type, created above. This is updated on the “Options” tab of the Escalation Rule.

Navigate to Integrations > Inbound Integrations, click Add API Integration and then click the Custom tile to open the dialog for a new custom integration. On the “Basic Settings” tab, add an Integration Name, select the Escalation Rule and check the Enabled checkbox.

URL Mapping

On the “Advanced Settings” tab, click URL Mapping and add the following:

Advanced Mapping

Next, click Advanced Mapping. Populate the Custom Alert Fields from the inbound integration by entering the following:

A default Recipient Group can be set here but the Dynamic Recipient Group section can be used for more fine grained control of recipients.

Dynamic Recipient Groups

On the “Dynamic Recipient Groups” you can map incoming Moogsoft Onprem team names to AlertOps Recipient Group.

These teams are those added to a Situation when the Situation is forwarded to AlertOps and are populated into a list in the “teams” field of the AlertOps inbound integration. You can add conditions to teams assigned to AlertOps Recipient groups based on the names of the Moogsoft Onprem teams listed in the “teams” field.

Navigate to Integrations > Outbound Integrations, click Add Outbound Integration to open the “Outbound Integration Detail” dialog, and then enter the following:

Click Save and Continue to add methods to the outbound integration.

{
   "engine_name": "Situation Integration",
   "workflow_name": "Handle AlertOps Response",
   "sitn_id": "<<MessageThread.SourceIdentifier>>",
   "context": {
      "alertops_id": "<<MessageThread.MessageThreadID>>",
      "subject": "alertCreated",
      "passedInstance": "<<Attribute.ai_aiops_instance>>"
   }
}

{
   "engine_name": "Situation Integration",
   "workflow_name": "Handle AlertOps Response",
   "sitn_id": "<<MessageThread.SourceIdentifier>>",
   "context": {
      "subject": "messageAdded",
      "message": "<<Message.MessageText>>",
      "passedInstance": "<<Attribute.ai_aiops_instance>>"
   }
}

{
   "engine_name": "Situation Integration",
   "workflow_name": "Handle AlertOps Response",
   "sitn_id": "<<MessageThread.SourceIdentifier>>",
   "context": {
      "subject": "alertAssigned",
      "user": "<<MessageThread.OwnerUserName>>",
      "passedInstance": "<<Attribute.ai_aiops_instance>>"
   }
}

{
   "engine_name": "Situation Integration",
   "workflow_name": "Handle AlertOps Response",
   "sitn_id": "<<MessageThread.SourceIdentifier>>",
   "context": {
      "alertops_id": "<<MessageThread.MessageThreadID>>",
      "subject": "alertClosed",
      "passedInstance": "<<Attribute.ai_aiops_instance>>"
   }
}

New workflows are required to trigger outbound communication back to Moogsoft Onprem. These are added by navigating to “Workflows” and clicking Add Workflow.

Moogsoft Initial Response

The workflow triggering the initial callback to Moogsoft Onprem when an alert is opened. This workflow used to update the originating Situation with the AlertOps Alert ID.

Moogsoft Send Assigned

The workflow that notifies Moogsoft Onprem when an AlertOps alert is assigned. This workflow adds a thread entry to the Situation and may acknowledge and assign to the Moogsoft Onprem AlertOps integration user.

Moogsoft Send Closed

The workflow that notifies Moogsoft Onprem when an AlertOps alert is assigned. This workflow resolves the originating Situation.

Moogsoft Send Comment

The workflow that sends a notification to Moogsoft Onprem when a reply to an AlertOps alert is made. This workflow adds a thread entry to the originating Situation in Moogsoft Onprem.

The final step to enable the integration in AlertOps is to assign the outbound workflow to the escalation rule use by the inbound integration.

Navigate to Escalation Rules and then select the rule in use by the inbound Integration configured in step 3. On the “Workflows” tab, click Add Workflow and move each of the following from the list of available workflow to the list of selected workflow:

Click Update to commit the changes and then click Update again in the main Escalation Rule dialog.