Pagerduty Data Ingest

Coralogix allows you to monitor PagerDuty incidents through webhooks. You can receive HTTP callbacks when incidents are triggered and updated. Using alerts and visualizations you can gain insight into the status of these incidents. Having both PagerDuty and application/infrastructure logs consolidated within Coralogix allows you to view and analyze incidents’ trend. This can help with root cause and impact analysis as well as in correlating resources with issues.

Coralogix came up with an easy solution to allow you to collect PagerDuty incidents. The steps below are going to walk you through how to do so.

Generate your token

  1. Open in Coralogix: Settings -> Context Data Plugins
  2. Click on the PagerDuty tab.
  3. Click on the “+ADD NEW KEY”  button.
  4. Enter integration name in the pop-up window (it can be any name).
  5. The token will show up on the list.

Create PagerDuty webhook

  1. Log in to your PagerDuty  account.
  2. Select services and select service directory to see your configured services.

3. Click the service you want to configure the webhook for and click integrations.

4. Click add or manage extensions.

5. A new page will open. Click New extension.

6. Complete the form and hit save.

Cluster URL is  a variable. Please match this part with a row entry within the table. Copy the table row entry located under the column that matches the top-level domain of your Coralogix account (.com, .in, etc.). Replace the variable part of the URL with this entry.

 EUINUSA
Cluster URLcoralogix.comapp.coralogix.incoralogix.us
Team URL.coralogix.com.app.coralogix.in.app.coralogix.us

Extension Type Name  URL
Generic V2 Webhook Put anything you want here https://integrations.Cluster URL/v1/pagerduty/v1/events/<token>

If you like to specify the application name and subsystem name  you can add  them right after the token in the payload URL like below example.

https://integrations.Cluster URL/v1/pagerduty/v1/events/<token>?appName=<my-app>&subSystem=<my-subsystem>

 

Example log:

{
   "source_system"  :  "pagerduty" ,
   "pagerduty"  : {
     "event"  :  "incident.trigger" ,
     "log_entries"  : [
      {
         "id"  :  "R0EYM81WSBZ27ACLRWOMSVVO77" ,
         "type"  :  "trigger_log_entry" ,
         "summary"  :  "Triggered through the website" ,
         "self"  :  "https://api.pagerduty.com/log_entries/R0EYM81WSBZ27ACLRWOMSVVO77" ,
         "html_url"  :  "https://coralogixtest.pagerduty.com/incidents/PRUIXXX/log_entries/R0EYM81WSBZ27ACLRWOMSVVO77" ,
         "created_at"  :  "2021-02-22T08:44:45Z" ,
         "agent"  : {
           "id"  :  "P0G8XXX" ,
           "type"  :  "user_reference" ,
           "summary"  :  "John Doe" ,
           "self"  :  "https://api.pagerduty.com/users/P0G8XXX" ,
           "html_url"  :  "https://coralogixtest.pagerduty.com/users/P0G8XXX" 
        },
         "channel"  : {
           "type"  :  "web_trigger" ,
           "summary"  :  "Outage" ,
           "subject"  :  "Outage" ,
           "details"  :  "Hey there, this is serious outage!" ,
           "details_omitted"  :  false ,
           "body_omitted"  :  false 
        },
         "service"  : {
           "id"  :  "PTIHXXX" ,
           "type"  :  "service_reference" ,
           "summary"  :  "web-server" ,
           "self"  :  "https://api.pagerduty.com/services/PTIHXXX" ,
           "html_url"  :  "https://coralogixtest.pagerduty.com/service-directory/PTIHXXX" 
        },
         "incident"  : {
           "id"  :  "PRUIXXX" ,
           "type"  :  "incident_reference" ,
           "summary"  :  "[#7] Outage" ,
           "self"  :  "https://api.pagerduty.com/incidents/PRUIXXX" ,
           "html_url"  :  "https://coralogixtest.pagerduty.com/incidents/PRUIXXX" 
        },
         "teams"  : [],
         "contexts"  : [],
         "event_details"  : {
           "description"  :  "Outage" 
        }
      }
    ],
     "webhook"  : {
       "endpoint_url"  :  "https://integrations.dev-shared.coralogix.net/v1/pagerduty/v1/events/98663b44-74e5-11eb-a35c-0a1196871111?appName=pagerfero&subSystem=stagging-incidents" ,
       "name"  :  "Cora" ,
       "description"  :  null ,
       "webhook_object"  : {
         "id"  :  "PTIHXXX" ,
         "type"  :  "service_reference" ,
         "summary"  :  "web-server" ,
         "self"  :  "https://api.pagerduty.com/services/PTIHXXX" ,
         "html_url"  :  "https://coralogixtest.pagerduty.com/service-directory/PTIHXXX" 
      },
       "config"  : {
         "referer"  :  "https://coralogixtest.pagerduty.com/services/PTIHXXX/integrations?service_profile=1" 
      },
       "outbound_integration"  : {
         "id"  :  "PJFWXXX" ,
         "type"  :  "outbound_integration_reference" ,
         "summary"  :  "Generic V2 Webhook" ,
         "self"  :  "https://api.pagerduty.com/outbound_integrations/PJFWXXX" ,
         "html_url"  :  null 
      },
       "accounts_addon"  :  null ,
       "id"  :  "PZNHXXX" ,
       "type"  :  "webhook" ,
       "summary"  :  "Cora" ,
       "self"  :  "https://api.pagerduty.com/webhooks/PZNHXXX" ,
       "html_url"  :  null 
    },
     "incident"  : {
       "incident_number"  :  7 ,
       "title"  :  "Outage" ,
       "description"  :  "Outage" ,
       "created_at"  :  "2021-02-22T08:44:45Z" ,
       "status"  :  "triggered" ,
       "incident_key"  :  "a466d2a1d4a74932a3b980cb599e47ec" ,
       "service"  : {
         "id"  :  "PTIHXXX" ,
         "name"  :  "web-server" ,
         "description"  :  "Your first service - describe what this service is monitoring and any information that will help responders.
For example: What is the SLA of this service? Where are the runbooks for this service stored? What tier level is this service?" ,
         "created_at"  :  "2021-02-09T16:00:23Z" ,
         "updated_at"  :  "2021-02-09T16:00:23Z" ,
         "status"  :  "critical" ,
         "teams"  : [],
         "alert_creation"  :  "create_alerts_and_incidents" ,
         "addons"  : [],
         "scheduled_actions"  : [],
         "support_hours"  :  null ,
         "last_incident_timestamp"  :  "2021-02-22T08:44:45Z" ,
         "escalation_policy"  : {
           "id"  :  "PLGAXXX" ,
           "type"  :  "escalation_policy_reference" ,
           "summary"  :  "Default" ,
           "self"  :  "https://api.pagerduty.com/escalation_policies/PLGAXXX" ,
           "html_url"  :  "https://coralogixtest.pagerduty.com/escalation_policies/PLGAXXX" 
        },
         "incident_urgency_rule"  : {
           "type"  :  "constant" ,
           "urgency"  :  "high" 
        },
         "acknowledgement_timeout"  :  null ,
         "auto_resolve_timeout"  :  null ,
         "alert_grouping"  :  null ,
         "alert_grouping_timeout"  :  null ,
         "alert_grouping_parameters"  : {
           "type"  :  null ,
           "config"  :  null 
        },
         "integrations"  : [
          {
             "id"  :  "PXKGXXX" ,
             "type"  :  "app_event_transform_inbound_integration_reference" ,
             "summary"  :  "Coralogix" ,
             "self"  :  "https://api.pagerduty.com/services/PTIHXXX/integrations/PXKGXXX" ,
             "html_url"  :  "https://coralogixtest.pagerduty.com/services/PTIHXXX/integrations/PXKGXXX" 
          }
        ],
         "metadata"  : {},
         "response_play"  :  null ,
         "type"  :  "service" ,
         "summary"  :  "web-server" ,
         "self"  :  "https://api.pagerduty.com/services/PTIHXXX" ,
         "html_url"  :  "https://coralogixtest.pagerduty.com/service-directory/PTIHXXX" 
      },
       "assignments"  : [
        {
           "at"  :  "2021-02-22T08:44:45Z" ,
           "assignee"  : {
             "id"  :  "P0G8XXX" ,
             "type"  :  "user_reference" ,
             "summary"  :  "John Doe" ,
             "self"  :  "https://api.pagerduty.com/users/P0G8XXX" ,
             "html_url"  :  "https://coralogixtest.pagerduty.com/users/P0G8XXX" 
          }
        }
      ],
       "assigned_via"  :  "escalation_policy" ,
       "last_status_change_at"  :  "2021-02-22T08:44:45Z" ,
       "first_trigger_log_entry"  : {
         "id"  :  "R0EYM81WSBZ27ACLRWOMSVV111" ,
         "type"  :  "trigger_log_entry_reference" ,
         "summary"  :  "Triggered through the website" ,
         "self"  :  "https://api.pagerduty.com/log_entries/R0EYM81WSBZ27ACLRWOMSVV111" ,
         "html_url"  :  "https://coralogixtest.pagerduty.com/incidents/PRUIXXX/log_entries/R0EYM81WSBZ27ACLRWOMSVV111" 
      },
       "alert_counts"  : {
         "all"  :  0 ,
         "triggered"  :  0 ,
         "resolved"  :  0 
      },
       "is_mergeable"  :  true ,
       "escalation_policy"  : {
         "id"  :  "PLGAXXX" ,
         "type"  :  "escalation_policy_reference" ,
         "summary"  :  "Default" ,
         "self"  :  "https://api.pagerduty.com/escalation_policies/PLGAXXX" ,
         "html_url"  :  "https://coralogixtest.pagerduty.com/escalation_policies/PLGAXXX" 
      },
       "teams"  : [],
       "impacted_services"  : [
        {
           "id"  :  "PTIHXXX" ,
           "type"  :  "service_reference" ,
           "summary"  :  "web-server" ,
           "self"  :  "https://api.pagerduty.com/services/PTIHXXX" ,
           "html_url"  :  "https://coralogixtest.pagerduty.com/service-directory/PTIHXXX" 
        }
      ],
       "pending_actions"  : [],
       "acknowledgements"  : [],
       "basic_alert_grouping"  :  null ,
       "alert_grouping"  :  null ,
       "last_status_change_by"  : {
         "id"  :  "PTIHUXXX" ,
         "type"  :  "service_reference" ,
         "summary"  :  "web-server" ,
         "self"  :  "https://api.pagerduty.com/services/PTIHXXX" ,
         "html_url"  :  "https://coralogixtest.pagerduty.com/service-directory/PTIHXXX" 
      },
       "metadata"  : {},
       "external_references"  : [],
       "incidents_responders"  : [],
       "responder_requests"  : [],
       "subscriber_requests"  : [],
       "urgency"  :  "high" ,
       "id"  :  "PRUI111" ,
       "type"  :  "incident" ,
       "summary"  :  "[#7] Outage" ,
       "self"  :  "https://api.pagerduty.com/incidents/PRUI111" ,
       "html_url"  :  "https://coralogixtest.pagerduty.com/incidents/PRUI111" ,
       "alerts"  : []
    },
     "id"  :  "36f99188-74ea-11eb-87ca-0242c0a81111" ,
     "created_on"  :  "2021-02-22T08:44:45Z" ,
     "account_features"  : {
       "response_automation"  :  true 
    },
     "account_id"  :  "PWLHXXX" 
  }
}