-
Notifications
You must be signed in to change notification settings - Fork 357
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Options section for integrations. #5962
Conversation
Fix: Formats
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It is necessary to add a Shuffle API reference that has the variables that can be modified for the options
field.
Add: JSON format to Pagerduty section
|
Remove VT integrations. Deleted from PR.
Thanks Javi, the changes have been applied correctly 😃 |
</integration> | ||
|
||
<!-- Integration with PagerDuty --> | ||
<integration> | ||
<name>pagerduty</name> | ||
<api_key>API_KEY</api_key> <!-- Replace with your PagerDuty API key --> | ||
<options>{"pretext": "Custom title"}</options> <!-- Replace with your custom JSON object --> | ||
<alert_format>json</alert_format> <!-- With the new script this is mandatory --> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What new script? maybe some context is needed if commenting like this
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi @javimed !
I spoke with @MarcelKemp and the new script is being maintained.
Mainly, the change is based on the fact that pagerduty previously had a shell
script and now it is in python
.
For this reason, as most of the python scripts of integrations, the format of the alert that it expects is in JSON and for this reason it is necessary to change this parameter in the configuration.
Let's revise that mandatory json format comment in the configuration
Description
This PR addresses and closes #5927 . It expands on the integrations examples using the new feature
options
.With the changes to this PR, the following issues would be fixed:
The changes that have been made are as follows:
integrations
, calledoptions
that supports a custom JSON object to add or modify the different tags of the integrations.ossec.conf
reference.Checks
code
font for Bash commands, file names, REST paths, and code.redirects.js
script if necessary (check this guide).