Hi all,
We're looking into automating alerts from Aruba Central into our ticketing system (its not servicenow) using webhook.
From the documentation - https://developer.arubanetworks.com/hpe-aruba-networking-central/docs/using-alerts-with-webhooks
Alert State
When you receive a new alert that is forwarded to the configured Webhook, there exists a field titled state in the JSON string which denotes the state of the alert received. When the alert is new, the value will be Open.
Certain alerts will automatically send a Webhook notification for the same incident but with the state set to Close to show that the original alert has been resolved. For example, the "Switch Disconnected" alert sends a notification to the Webhook when the switch initially disconnects with state: Open and a unique identifier. When the switch reconnects, the Webhook will receive another "Switch Disconnected" alert matching the original unique identifier with state: Close.
When an alert is acknowledged, no notification is sent to the Webhook and the state of the alert will be state: Open but a new field will exist in the payload titled acknowledged and it's value will be set to true.
Acknowledging Alerts
To close the state of any alert (if not done automatically), you'll need to acknowledge the alert. Acknowledging an alert can be done using two methods in HPE Aruba Networking Central:
When a switch or AP is disconnected a webhook is generated with a State of Open and if the switch/AP comes back online the State is updated to Close, perfect.
On the other hand, when a AP is power cycled or rebooted, its State remains Open even when the alert is acknowledged and no webhook update is sent.
I have two questions;
Q1. As stated in the documentation, certain alerts will automatically send a webhook with a State of Closed when they return to normal, is there a list of these alerts?
When the alert is acknowledged manually or via API, our ticketing system isn't notified because the webhook isn't updated.
Q2. What's the best away to monitor if the alert has been acknowledged without polling the API?
All suggestions welcome, thanks in advance.