youngmon/atlassian-qna huggingface dataset:
Closing out an alert stops all actions
Asked by William Butt:

Hello,

As per this guide ([Close and delete an alert \| Opsgenie \| Atlassian Support)](https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.atlassian.com%2Fopsgenie%2Fdocs%2Fclose-and-delete-an-alert%2F&data=04%7C01%7CWilliam.Butt%40oneidentity.com%7Ca11517463ced4d37353608d909a1e337%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637551413180393214%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=6tO8fwOQz5N2Vtm%2BvxFm%2FtLaYCUoIsAc7%2Bknl2jx9mQ%3D&reserved=0).

This one basically states that Closing is conclusive; meaning all necessary actions have been taken.

So to confirm, if you just close out the alert, no further actions (alerts) will occur correct? This will stop the alert process?

It may be a silly question however, I'm being informed that you must acknowledge first and then close.

Thanks


Answers:
author: Samir
body: Hi [@William Butt](/t5/user/viewprofilepage/user-id/4345528) !

Yup that's right. Once an alert is closed, the only other action that can be taken is to "delete" the alert.

Closing an alert will stop the notification/escalation process.

comments: author: William Butt
body: Thanks [@Nick H](/t5/user/viewprofilepage/user-id/2540930) and [@Samir](/t5/user/viewprofilepage/user-id/2168284) for the quick response, you guys are awesome.


author: Nick H
body: Hi [@William Butt](/t5/user/viewprofilepage/user-id/4345528) ,

If an alert is closed, "Recipients \[who were notified of the alert\] will be notified when an alert is closed" like that document incidents. But no other notifications will sent, and no other actions will be possible on the alert (besides deleting the alert).

Hope this helps! Let us know if you have any other questions.

comments: author: Nick H
body: A user does not necessarily need to acknowledge an alert before closing it, but acknowledging an alert can halt notifications.
How can I tag someone to initiate a communication under Incident tab for a particular incident?
Asked by Rajvi Prajapati:

There is no **Notes** section available under **Incident** tab to add comments to/initiate a communication by tagging someone. This feature only exists under **Alerts** tab. How to enable a notes section to solve our purpose of adding comments to the incident over the platform?


Answers:
author: Samir
body: Hi [@Rajvi Prajapati](/t5/user/viewprofilepage/user-id/4369678) ,

There isn't a notes option available on incidents. With incidents, there is the Incident Command Center (ICC) that provides a video conference and a chat option in there where incident responders can collaborate.

Further, there is the Slack App for incident management where you can create a slack channel from an incident. You can also add updates to the incident timeline, and send updates to stakeholders.

Each incident also creates responder alerts for each team that is a responder on the incident. So each team will have their own responder alert, and can add notes to those alerts.

Hope this helps! Let me know if you have anymore questions.

Thanks,

Samir


Tags: cloud

jira-service-management
setting priority of alert from Zabbix send2opsgenie plugin
Asked by Jeff Avila:

Hi All,

I have some Zabbix Actions created that run the send2opsgenie program for alerting opsgenie. The instructions for the Zabbix plugin (I'm running Zabbix 4.0) say to copy the following block into the "Commands" window of the Zabbix Action:

### /home/opsgenie/oec/opsgenie-zabbix/send2opsgenie -triggerName='{TRIGGER.NAME}' -triggerId='{TRIGGER.ID}' -triggerStatus='{TRIGGER.STATUS}' -triggerSeverity='{TRIGGER.SEVERITY}' -triggerDescription='{TRIGGER.DESCRIPTION}' -triggerUrl='{TRIGGER.URL}' -triggerValue='{TRIGGER.VALUE}' -triggerHostGroupName='{TRIGGER.HOSTGROUP.NAME}' -hostName='{HOST.NAME}' -ipAddress='{IPADDRESS}' -eventId='{EVENT.ID}' -date='{DATE}' -time='{TIME}' -itemKey='{ITEM.KEY}' -itemValue='{ITEM.VALUE}' -recoveryEventStatus='{EVENT.RECOVERY.STATUS}' {#toc-hId-1231342551}

This does create an alert with the necessary info in Opsgenie, but it creates it at Priority 3. I'd like to have some alerts at other priorities... is there a way to do that inside Zabbix?

Thanks!

-Jeff


Answers:
author: Samir
body: Hi [@Jeff Avila](/t5/user/viewprofilepage/user-id/4369406) !

The best thing to do would be to edit the zabbix integration within Opsgenie to set the priority. So by default, when an alert is created via a Zabbix integration, it gets created as a P3 like you mentioned...

However, you can set the priority that zabbix alerts will be created as within the integration... (Note - this requires access to "Advanced integrations" in Opsgenie, which is available on the Standard and Enterprise plans)

e.g.

![2021-04-27_15-18-21.png](https://community.atlassian.com/t5/image/serverpage/image-id/140743iFBEE6E5556511BF2/image-size/large?v=v2&px=999 "2021-04-27_15-18-21.png")

If you want the priority to change depending on the context of the alert, you could setup multiple "Create Alert" actions there with filters, to set the priority accordingly.

For example...

If alert received from zabbix with trigger severity = CRITICAL, create an alert with priority = P1

![2021-04-27_15-19-54.png](https://community.atlassian.com/t5/image/serverpage/image-id/140744i700FC3F39F280558/image-size/large?v=v2&px=999 "2021-04-27_15-19-54.png")

Else, if alert received from zabbix with trigger severity = HIGH, create an alert with priority = P2

![2021-04-27_15-21-03.png](https://community.atlassian.com/t5/image/serverpage/image-id/140745i7269096D0F2769B2/image-size/large?v=v2&px=999 "2021-04-27_15-21-03.png")

So that's how you can set the priority of alerts created in Opsgenie from zabbix, based on the values of the fields Zabbix is sending over.

Hope that helps!

Thanks,

Samir

comments: author: Giovanni Martarello
body: Hello Samir

I am accessing Teams -\> my team name -\> Integrations -\> Zabbix, but I did not find the advanced integration options.

Only these options:

![Sem t?tulo.png](https://community.atlassian.com/t5/image/serverpage/image-id/342781i26A4C4F3DA69EF04/image-size/large?v=v2&px=999 "Sem t?tulo.png")

Thanks by support.


Tags: cloud

zabbix
sns subscription is in pending confirmation state
Asked by vibhor:

sns subscription is in pending confirmation state


Answers:
author: Samir
body: Hi [@vibhor](/t5/user/viewprofilepage/user-id/4365045) ,

Is this for a Cloudwatch integration you're trying to setup with Opsgenie?

When you setup an Cloudwatch integration with Opsgenie, when you create the https subscription for the topic the cloudwatch alarms are publishing to, it should create an alert in Opsgenie showing the confirmation.

e.g.

![2021-04-26_09-31-24.png](https://community.atlassian.com/t5/image/serverpage/image-id/140469iE42A5EDC10A49C65/image-size/large?v=v2&px=999 "2021-04-26_09-31-24.png")

If it didn't get created, you may want to confirm that you setup the https subscription correctly with the right endpoint (i.e. the endpoint provided within the Cloudwatch integration in Opsgenie)


author: Nic Brough -Adaptavist-
body: OK. What is SNS, what does it have to do with Atlassian and what are you asking us about?
Alert phone number
Asked by Colter Seitz:

Were are currently testing alerts from Opsgenie to response coordinators and have noticed that when an alert is sent to our phones via voice the number that shows up is always different. Is there a way to fix this number so that it is always the same? We'd like to be able to identify the number and add it as a contact in our individual phones.


Answers:
author: Nick H
body: Hi [@Colter Seitz](/t5/user/viewprofilepage/user-id/4371379) ,

There is not a way to pick which number notifies your users.

So you and your users will want to download our vCard. This will add an Opsgenie contact to your mobile device that includes all the numbers Opsgenie will notify via sms or voice:

<https://support.atlassian.com/opsgenie/docs/send-voice-and-sms-notifications/#Download-US-vCard>

comments: author: Nick H
body: \^ You can also find our EU vCard in that doc as well - depending on which region your users are located: <https://support.atlassian.com/opsgenie/docs/send-voice-and-sms-notifications/#Download-EU-vCard>


author: Taylan Kasap
body: Why is Opsgenie calling me from a number that's not on these lists? Is there a full list of numbers? (I'm located in Turkey)


author: Nick H
body: Hi [@Taylan Kasap](/t5/user/viewprofilepage/user-id/4633421) ,

Can you share what number is dialing you? It could be that our provider is dialing from one of the numbers available on our vCard, but it's then being transferred through another provider to connect the call - due to location.


author: Taylan Kasap
body: Hi [@Nick H](/t5/user/viewprofilepage/user-id/2540930) , it's +44 (772) 345-8517


author: Daniel Compton
body: It would be great if the OpsGenie mobile app offered to install the VCard when you set it up, and to set it as a Favourite in your iPhone.

This is what PagerDuty does and it means that everybody hopefully has the VCard added to favourites so that it will bypass Do Not Disturb.


Tags: cloud
OpsGenie - Download Incident Details (CSV or Excel)
Asked by dpetit:

OpsGenie does not appear to provide any incident-level reporting out-of-the-box in the analytics section, so I am thinking of creating my own.

Is there any way to export all of the incidents created during a particular time range, along with incident details (affected systems, description, Impact Started/Ended/Detected) to CSV or something similar?


Answers:
author: Samir
body: Hi [@dpetit](/t5/user/viewprofilepage/user-id/4348072) !

There isn't a way currently export incidents from Opsgenie the same way you can with alerts.

With alerts, you can do it through the alert dashboard, export csv option. Or you can do it through Analytics -\> Alert Reports -\> Alert Analytics, and you can view the alerts in a table there and download it as a .csv file.

With incidents, we don't have these same options currently. The only way to export incidents out of Opsgenie would be via our [Incident API](https://docs.opsgenie.com/docs/incident-api). We have some feature requests around being able to export incidents out of Opsgenie similarly to how you can export alerts. So hopefully those will be implemented in the near future, but for the time being the Incident API would be the only option.

Thanks,

Samir

comments: author: dpetit
body: Thanks for the info.

I would like to request that you make promoting incidents to a first-class entity in the program a priority. IMHO, incidents are actually way more important than alerts, yet OG has all kinds of alert functionality.


author: Samir
body: Understood [@dpetit](/t5/user/viewprofilepage/user-id/4348072) . The incident management side to Opsgenie is *relatively* new. The platform started with alerting originally, which is why there is more functionality around alerts in Opsgenie.

The incident management side is now a priority for our product/development teams to add more functionality around. So I expect there will be more options for exporting incidents to be introduced down the road.

Thanks,

Samir


author: EZ
body: I want to also second [@dpetit](/t5/user/viewprofilepage/user-id/4348072) request. For audit purposes, there should be the ability to export incidents. It has been a grueling and manual process to export all the incident reports for an audit.

Please increase the priority on this feature request.


author: Jose Trujillo
body: [@Samir](/t5/user/viewprofilepage/user-id/2168284)

Could you provide the latest status on this question? It has been over 1.5y since the request and it would be good to know where this specific ask is being tracked in Atlassian's roadmap.

Thanks!


author: Peter Toth
body: I just ran into this issue. Why can't we download the list of incidents as a CSV? When will this be implemented?


author: JV
body: Same as above and what [@Peter Toth](/t5/user/viewprofilepage/user-id/5297913) said, [@Samir](/t5/user/viewprofilepage/user-id/2168284). Would love to be able to export/download a list of incidents as a CSV.


Tags: cloud
How to use advanced integration settings in opsgenie?
Asked by Lucas Jen?:

We're currently trying to evaluate whether Opsgenie meets our requirements, and I've mostly been at a complete loss as to how to do things. The documentation often features cropped screenshots that don't show me where something is happening specifically, so maybe this is a silly question (I'm on the standard plan trial):

How do I access the advanced settings for an integration, for filtering and actions and the like? According to what I can see in the docs it should be somewhere under Teams \> Integrations, but I have no such buttons there.

Additionally, which plan do I need to create a webhook integration? Does this only work on the enterprise plan?

Cheers  
Lucas


Answers:
author: Nick H
body: Hi [@Lucas Jen?](/t5/user/viewprofilepage/user-id/4361924) ,

You should see an Advanced tab within each integration here:

![advancedcomm1.jpg](https://community.atlassian.com/t5/image/serverpage/image-id/139944i6D88EFDC30CA2DAF/image-size/large?v=v2&px=999 "advancedcomm1.jpg")

If you do not see that then it's most likely a permission issue, or you are not on a Standard or Enterprise trial.

You would also need to be on the Standard or Enterprise plan to use the Webhook integration (or any other outgoing integration).

Hope this helps. Let us know if you have any additional questions, issues, etc.

comments: author: Lucas Jen?
body: Mmh, according to the Atlassian account I'm on the trial, but I'm guessing there's something wrong. According to the settings I'm in the Owner role, but I'm also missing lots of the settings in your left navigation bar. I suppose I need to contact support to get this fixed / resolved?


author: Nick H
body: As the Owner you are able to upgrade your trial under the Quick Start Guide:

![advancedcomm2.jpg](https://community.atlassian.com/t5/image/serverpage/image-id/139948i7AE49320123EECED/image-size/large?v=v2&px=999 "advancedcomm2.jpg")


author: Lucas Jen?
body: I think the problem might be that my opsgenie access is somehow linked to the Jira Service Management subscription, so I don't really have that quickstart guide at all (don't even thave the icon you're highlighting there).


author: Nick H
body: Ahh - yes that's most likely the issue then.

Sounds like you are subscribed to the JSM Standard plan which is the equivalent of the Opsgenie Essentials plan. This OG plan does not include the Advanced tab within integrations, and also does not include the Webhook integration - since it's an outgoing integration.

Unfortunately the only way to "upgrade" your Opsgenie plan would be to upgrade your JSM plan. So it might make more sense to take out a standalone Opsgenie trial to test functionality of the plan before making any decisions: <https://www.atlassian.com/software/opsgenie/try>
Icinga2 check URL to Opsgenie
Asked by Lukas R?hrl:

Hi,  

i have connected our Icinga Server to Opsgenie and all is working well.  
For a faster troubleshooting i would like to get the Icinga Check URL to Opsgenie, so i have only to click on the URL and will be directed to the Check in Icinga.  

Is it possible to configure the Icinga Server / Opsgenie to get the check URL in the Opsgenie alert?  

Regards  
Lukas


Answers:
author: Samir
body: Hi [@Lukas R?hrl](/t5/user/viewprofilepage/user-id/4361049) ,

It would depend on whether Icinga sends this url over in the payload. If it does, then you could certainly parse it out in the integration using [dynamic fields.](https://support.atlassian.com/opsgenie/docs/dynamic-fields-in-opsgenie-integrations/)

For example, if there is a field called checkUrl in the payload Icinga sends to Opsgenie, something like {{_payload.checkUrl}} you could put in the integration to parse it out...

![2021-04-22_09-31-44.png](https://community.atlassian.com/t5/image/serverpage/image-id/139902i16D7AEF7D8731C34/image-size/large?v=v2&px=999 "2021-04-22_09-31-44.png")

So as long as Icinga is sending over this url in the payload, then we can parse it out.

You can check the logs in Settings -\> Logs in Opsgenie to see the payload we're receiving from Icinga, to see if that URL is included in there. Please feel free to reach out to support via support.atlassian.com and we can assist you with checking the logs, and determining how to parse it out if it's being sent.

Thanks,

Samir


Tags: cloud
How to automatically parse Alert content into Incident
Asked by serge calderara:

Dear all,

We actually receive in slack the following sample Dynatrace message format type as seen below :

![EKZMwJxKYu.png](/t5/image/serverpage/image-id/139839i82CFBB5BA24144DA/image-dimensions/360x227?v=v2 "EKZMwJxKYu.png")

We plan to connect Dynatrace dirctly with opsgenie in order to receive that same message as an Alert.

Then what we need to do aftewards is that when Alert is receive we would like to create an incident automatically whith already all fields set as per initial message.

What is the easy way to perform automatic parsing of field and incident generation ?

regards


Answers:
author: Samir
body: Hi [@serge calderara](/t5/user/viewprofilepage/user-id/3385932) ,

You can automate incident creation from alerts in Opsgenie using[incident rules.](https://support.atlassian.com/opsgenie/docs/automatically-create-an-incident-via-incident-rules/)

Within these rules, you can specify which fields from the alert you want to populate the fields of the incident.

If you're on a [JSM plan](https://www.atlassian.com/software/jira/service-management/pricing), you would need to be on JSM premium or enterprise to have this feature.

If you're on an[Opsgenie standalone plan](https://www.atlassian.com/software/opsgenie/pricing), you would need to be on Standard or Enterprise to have this feature.

Thanks,

Samir
Como generar incidente en opsgenie y que en JSM solo se muestre la incidencia en un solo proyecto
Asked by GABRIEL FLORES HERNANDEZ:

Hola buenas tardes, Actualmente estoy generando una incidencia en JSM y en opsgenie se genera una alerta despues de la alerta se genera un incidente en opsgine y como existe la conexion entre opsgenie con JSM, en la seccion de inicidentes de JSM tambien puede ver los incidentes. Solo que en JSM los incidentes se ven en todos los proyectos, como puedo hacer que solo se vea la incidencia en un solo proyecto de JSM.


Answers:
author: Mark Campbell-Vincent
body: Hi [@GABRIEL FLORES HERNANDEZ](/t5/user/viewprofilepage/user-id/4360232) -

You can use the Search Query for incidents to see the preferred projects. The best way to do this is to first add the {{projectKey}} to the description field in the JSM integration.

![Opsgenie_-_Integration.png](https://community.atlassian.com/t5/image/serverpage/image-id/143756iF12911565892C420/image-dimensions/458x256?v=v2 "Opsgenie_-_Integration.png")

Now when a JSM ticket creates an alert -\> incident in Opsgenie, the project key will be added to the incident's description:

![Opsgenie_-_Incidents.png](https://community.atlassian.com/t5/image/serverpage/image-id/143757i3598C7DBADF1531B/image-dimensions/512x278?v=v2 "Opsgenie_-_Incidents.png")

From here, you can use the Search Query to only see the incidents affiliated with the preferred projects:

![Opsgenie_-_Incidents.png](https://community.atlassian.com/t5/image/serverpage/image-id/143758iADB810D220A131DB/image-size/large?v=v2&px=999 "Opsgenie_-_Incidents.png")

Hope this helps!

comments: author: GABRIEL FLORES HERNANDEZ
body: Hola [@Mark Campbell-Vincent](/t5/user/viewprofilepage/user-id/2365445)

Buen d?a, gracias por el aporte. Revise la informaci?n y no veo como separar las incidencias dentro e JSM.

El detalle que estoy presentando es esto, el incidente creado en opsgenie, podemos verlo en JSM pero en todos los proyectos y es lo que no queremos que suceda. Actualmente se ve en el proyecto 1 y 2 , el objetivo de esto es que el incidente solo se muestre en el proyecto 2 dentro de JSM

![projecto 1.png](https://community.atlassian.com/t5/image/serverpage/image-id/143844i0522311A72ECAE1F/image-size/large?v=v2&px=999 "projecto 1.png")

![Projecto 2.png](https://community.atlassian.com/t5/image/serverpage/image-id/143847i3F967079397F1E52/image-size/large?v=v2&px=999 "Projecto 2.png")

Saludos.


author: Mark Campbell-Vincent
body: [@GABRIEL FLORES HERNANDEZ](/t5/user/viewprofilepage/user-id/4360232) -

The incidents you're seeing are major incidents across all projects. This feature cannot be changed since it's used to show all major incidents from Opsgenie regardless of the project you're currently in.
Using 3 seperate policies to take three seperate actions
Asked by Reuben deVries:

I have three escalation policies:  

P1 - Critical Incidents a critical piece of software is down or Infrastructure is down.  
P2 - A critical piece of software is not functioning properly and needs attention.  
P3 - All other alerts.  

I would like to have my On-Call receive a phone call regardless of the time for all P1 incidents, I would like my On-Call to receive a phone call between the times of 06:00 and 22:00 for all P2 incidents and I want an email or pop up notification on my phone with the app of all P3 or lower incidents. Has anyone implemented this sort of thing?


Answers:
author: Samir
body: Hi [@Reuben deVries](/t5/user/viewprofilepage/user-id/4306333) !

Each user controls *how* they are notified of alerts via the [notification rules](https://support.atlassian.com/opsgenie/docs/create-and-manage-notification-preferences/) on their profile.

You can setup multiple "New Alert" notification rules with filters, to be notified differently based on the priority of alerts.

e.g.

![2021-04-20_13-57-24.png](https://community.atlassian.com/t5/image/serverpage/image-id/139565i73AAE88779CD419F/image-size/large?v=v2&px=999 "2021-04-20_13-57-24.png")

In this example, I have 3 different "New Alert" Notification rules. The first one has a filter for priority = P1, and will notify me via those methods for alerts that I'm a recipient of that have priority = P1.

2nd one filters for priority = P2, and 3rd one filters for priority *less* than P2 (i.e. P3, P4, or P5).

Each user sets their own notification rules, so users can configure multiple rules like I have in this example.

Alternatively, you can create a [Central Notification Template](https://support.atlassian.com/opsgenie/docs/create-a-central-notification-template/) to define these notification rules at a global level, and then *assign* that Central Notification Template to all users, or all users with a certain role. There is not a way to define *how* users are notified within an escalation policy. The escalation policies handle *who* is notified, and the users' notification rules will determine *how* they are notified.

Hope this helps! Let us know if you have anymore questions


Tags: cloud