Hi Mike,
You need to ask your SE or TAC...
------------------------------
PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...
PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)
PowerArubaCL: Powershell Module to use Aruba Central
PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..
ACEP / ACMX #107 / ACDX #1281
------------------------------
Original Message:
Sent: Oct 26, 2024 07:17 PM
From: mL30
Subject: Webhook Alerts - field cid
I've been monitoring alerts using webhook, while the JSON output of most of the alerts match the examples documented on the developer pages; https://developer.arubanetworks.com/hpe-aruba-networking-central/docs/ap-alerts#span-stylecolororangeap-tunnel-downspan
Other JSON responses include an additional field for 'cid', for example;
{
"id": "AZLFUYdYPY4FcW3aO3TZ",
"cid": "fxxxxxxx1ab7df11ed8bf2e23280cxxxxxx",
"nid": 1257,
"alert_type": "AP_TUNNEL_DOWN",
"setting_id": "2cea0de370d64cfsxxxxx4a808c099fb-1257",
"device_id": "XXXXXXXXX",
"description": {
"text": "AP tunnel vpn_tun_default_0 from 0.0.0.0 to 0.0.0.0 is DOWN on device XXX-XX73-AP01 with serial XXXXXXXXX at 2024-10-25 20:15:07 UTC. Reason: RC_ERROR_IKE_XAUTH_AUTHORIZATION_FAILED",
"format": "html"
},
"state": "Close",
"severity": "Major",
"operation": "update",
"timestamp": 1729976104,
"details": {
"src_ip": "0.0.0.0",
"dst_ip": "0.0.0.0",
"alias_map_name": "vpn_tun_default_0",
"name": "XXX-XX73-AP01",
"reason": "RC_ERROR_IKE_XAUTH_AUTHORIZATION_FAILED",
"serial": "XXXXXXXXX",
"group": "2",
"labels": ["79"],
"rule_number": "0",
"time": "2024-10-25 20:15:07 UTC"
},
"webhook": "xxxxx5c28-2c91-4f05-b53b-xxxxxxxx",
"cluster_hostname": "xxxxxxx.central.arubanetworks.com"
}
After a bit of digging I've that the CID field matches the Aruba Central's Customer ID, i'm surprised that all of the alerts don't show the CID
I've configured and applied the webhook at the MSP level, so i'm receive alerts from all subordinate customer accounts, but the cid only appears on a few alerts.
Can anyone point me to the documentation for the 'cid' field?
Thanks in advance,
Mike.