Create Notifications for Situations and Alerts
You can set up Moogsoft Onprem to send notifications to Webex automatically when situations or alerts get created.
Situation creation notifications
To send notifications to Webex, verify that the Create Webex Incident outbound notification workflow is enabled in the “Situation Integration” engine.
To trigger the outbound notification, add a workflow to the Situation Workflows workflow engine that includes the “createIncident” action. For example:
Workflow Name: Create Webex Incident
Entry filter: 'status' != 'Closed'
First Match Only: Checked
Action Name | Function | Arguments | Forwarding Behaviour |
|---|---|---|---|
120 seconds | Delay | 120 seconds | - |
Trigger send to Webex | createIncident | {"serviceName":"webex","arguments":{"rooms":["Incident Room 1","Incident Room 2"]}} | Stop This Workflow |
The serviceName should be “webex” and all other fields should be empty, unless you want to override the room. By default, the integration will post to the Default Room Name configured in the integration. To override this, specify a list of rooms in the arguments parameter. The previous example would post to the rooms: “Incident Room 1” and “Incident Room 2”.
This will send a request to Webex and add a thread entry for each room notified, e.g.:
Webex incident card created in room 'Incident Room 1'
You can adjust the Entry filter in the trigger workflow to control which situations are forwarded to Webex.
The outbound notification uses the Webex Situation payload map in the Webex integration to construct the message AdaptiveCard message for the notification.
The card uses a fixed template:
Icon (clickable linking back to situation) | <label> | |
<status> | ||
<description> | ||
<key 1> | <value 1> | |
<key 2> | <value 2> | |
<key 3> | <value 3> | |
. | . | |
<key n> | <value n> | |
Acknowledge (button) | Resolve (button) | Close (button) |
Where <label>, <status>, <description> and the <key x>, <value x> pairs are all derived from and customisable in the payload map.
If label, status or description are excluded from the payload map, they default to the following macro mappings:
Name | Rule |
|---|---|
label | $EXPAND(status) Situation # $(sig_id) |
status | $EXPAND(status) |
description | $(description) |
Alert creation notifications
To send notifications to Webex, verify that the “Create Webex Incident” outbound notification workflow is enabled in the “Alert Integration” engine.
To trigger the outbound notification, add a workflow to the “Alert Workflows” workflow engine that includes the “createIncident” action. For example:
Workflow Name: Create Webex Incident
Entry filter: 'status' != 'Closed'
First Match Only: Checked
Action Name | Function | Arguments | Forwarding Behaviour |
|---|---|---|---|
0 seconds | Delay | 0 seconds | - |
Trigger send to Webex | createIncident | {"serviceName":"webex","arguments":{"rooms":["Incident Room 1","Incident Room 2"]}} | Stop This Workflow |
The serviceName should be “webex” and all other fields should be empty unless you want with to override the room. By default, the integration will post to the Default Room Name configured in the integration. To override this, specify a list of rooms in the arguments parameter. The above example would post to the rooms: “Incident Room 1” and “Incident Room 2”.
The outbound notification uses the Webex Alert payload map in the Webex integration to construct the message AdaptiveCard message for the notification.
The template used is similar to that used for situations and includes the action buttons at the bottom to allow limited bidirectional communication.