Kafka Forwarder Workflows
The Kafka Forwarder integration works with existing Moogsoft Onprem workflow engines to forward data to Kafka topics.
Supported Workflow Types
Alert Forwarding
Use workflows to forward alerts to Kafka topics.
Workflow Engine | Use Case | Description |
|---|---|---|
Alert Workflows | Real-time alert forwarding | Forwards new alerts as they arrive. |
Alert Actions Engine | Alert update forwarding | Forwards alerts based on updates. |
Situation Forwarding
Use workflows to forward situations to Kafka topics.
Workflow Engine | Use Case | Description |
|---|---|---|
Situation Workflows | Real-time Situation forwarding | Forwards new Situations as they are created. |
Situation Delta Engine | Situation change forwarding | Forwards Situation updates and changes. |
Thread Entry Forwarding
Use workflows to forward Situation thread entries.
Workflow Engine | Use Case | Description |
|---|---|---|
Situation Delta Engine | Audit trail forwarding | Forwards thread entries for audit purposes. |
Workflow Usage Examples
Example 1: Basic Alert Forwarding
Configure an Alert Engine workflow to forward all alerts.
Workflow Name: Forward All Alerts to Kafka
Entry Filter: Leave empty to forward all alerts.
First Match Only: No
Action Name | Function | Arguments | Forwarding Behavior |
|---|---|---|---|
Forward to Kafka |
| {"target": "KafkaForwarder", "subject": "forwardToKafka", "details": {}} | Always forward |
Example 2: Filtered Situation Forwarding
Configure a Situation Engine workflow to forward high-priority Situations.
Workflow Name: Forward Critical Situations
Entry Filter: internal_priority = 5
First Match Only: Yes
Action Name | Function | Arguments | Forwarding Behavior |
|---|---|---|---|
Forward Critical Situations |
| {"target": "KafkaForwarder", "subject": "forwardToKafka", "details": {"sig_map": "critical_situations", "forward_alerts": true}} | Always forward |
Example 3: Thread Entry Audit Trail
Configure a Situation Delta Engine workflow to forward thread entries for audit purposes.
Workflow Name: Thread Entry Audit Trail
Entry Filter: Use sigActionFilter for thread actions.
First Match Only: No
Action Name | Function | Arguments | Forwarding Behavior |
|---|---|---|---|
Filter Thread Actions |
| {"actionTypes": ["Added Entry To Thread", "Agreed With Thread Entry", "Disagreed With Thread Entry"]} | Stop this workflow |
Forward Thread Entry |
| {"target": "KafkaForwarder", "subject": "forwardToKafka", "details": {"thread_map": "audit_trail"}} | Always forward |