Azure Integration not closing alert after receiving "Resolved" status from Azure
Asked by Andr? de Zwart:

Hi all,

I've set up an Azure integration to handle alerting and I'm looking for a way to automatically close the alert on OpsGenie as soon as the Azure Alert reports that the issue is resolved.

I've been looking at other questions, and [one seems similar](https://community.atlassian.com/t5/Opsgenie-questions/Azure-Resource-Health-integration-does-not-close-alerts/qaq-p/1781930) except that I don't see a lot of things that are on the screenshots in that question ("Actions" side bar and "Filter" sections for example).

I feel like it's stripped down and doesn't have a lot of options to configure the alerts:

![2022-01-06_08h47_25.png](https://community.atlassian.com/t5/image/serverpage/image-id/176364i98B8E2B6290A67DD/image-size/large?v=v2&px=999 "2022-01-06_08h47_25.png")

The "Actions" side bar and "Filters" section seems to be what I need to properly set up what I need. Could someone explain me how to get those?

Kind regards,

Andr?


Answers:
author: Andr? de Zwart
body: Regarding the part of this issue that Alerts where not being closed by the Azure webhook callback: When creating an action group in Azure and using the Webhook action type, you have to explicitly set the usage of the Common Alert schema:

![2022-01-12_09h28_52.png](https://community.atlassian.com/t5/image/serverpage/image-id/177359i98F7D6DD742AF29A/image-size/large?v=v2&px=999 "2022-01-12_09h28_52.png")

When this switch is set to "Yes" the common alert schema will be used and the "Status" property of the payload will contain the expected value of "Resolved". This will trigger the OpsGenie integration to close the alert.


author: Samir
body: Hi [@Andr? de Zwart](/t5/user/viewprofilepage/user-id/2485387) ,

This is because you are on a plan that does not include [Advanced Integrations](https://support.atlassian.com/opsgenie/docs/use-advanced-integration-settings/) feature. Advanced integrations is what allows you to modify the integration and customize the filters for which requests from Azure will *create* an alert, and which requests will *close* an alert.

Since you do not have this feature, your integration has the "Default" filters set up like this.

**Create Alert Action** - when Azure sends a request that matches this filter, it *creates* an alert in Opsgenie

**![2022-01-07_11-03-21.png](https://community.atlassian.com/t5/image/serverpage/image-id/176706i25EDE0697F50794B/image-size/large?v=v2&px=999 "2022-01-07_11-03-21.png")**

**Close Alert Action** - when Azure sends a request that matches this filter, it will close the corresponding alert in Opsgenie

![2022-01-07_11-04-27.png](https://community.atlassian.com/t5/image/serverpage/image-id/176707i3DABFA4995EAD40A/image-size/large?v=v2&px=999 "2022-01-07_11-04-27.png")

You can check the logs in your account to see the request being received from Azure, to se if it's not matching this filter. However since you don't have a plan that includes **Advanced Integrations** , you will not be able to *modify* that Close Alert Action filter. You would have to upgrade to a plan that includes this feature.

Thanks,

Samir

comments: author: Andr? de Zwart
body: Thanks, this really helped. I've found the logs and the webhook call for closing is indeed received by OpsGenie, but logging indicates that no matching actions are found.

Kind regards,

Andr? de Zwart


Tags: azure

integration