iLert
This Integration is part of the iLert Pack.#
iLert is a modern uptime platform with advanced on-call and alerting features.
Alert and notify users using iLert. This integration was integrated and tested with API version 1 of iLert.
Configure iLert on Cortex XSOAR#
Navigate to Settings > Integrations > Servers & Services.
Search for iLert.
Click Add instance to create and configure a new integration instance.
Parameter Required Server URL True The API key of the alert source (for triggering events only) True Trust any certificate (not secure) False Use system proxy settings False Click Test to validate the URLs, token, and connection.
Commands#
You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.
iLert-submit-event#
Creates a new event/incident in iLert (in order to use this command you have to enter the Integration Key in the integration settings)
Base Command#
ilert-submit-event
Input#
| Argument Name | Description | Required |
|---|---|---|
| incident_key | For ALERT events, the incident key can be used to deduplicate or group events. If an open incident with the key already exists, the event will be appended to the incident's event log. Otherwise a new incident will be created. For ACCEPT and RESOLVE events, the incident key is used to reference the open incident which is to be accepted or resolved by this event. | Optional |
| event_type | Must be either ALERT, ACCEPT, or RESOLVE. Default is ALERT. | Optional |
| summary | The event summary. Will be used as the incident summary if a new incident is created. | Optional |
| details | The event details. Will be used as the incident details if a new incident is created. | Optional |
| priority | Must be either HIGH or LOW. Will overwrite the evaluated priority of the alert source. | Optional |
Context Output#
There is no context output for this command.
Command Example#
!ilert-submit-event summary="Test incident"
Human Readable Output#
Incident has been created.
ilert-acknowledge-event#
Acknowledges an existing event in iLert
Base Command#
iLert-acknowledge-event
Input#
| Argument Name | Description | Required |
|---|---|---|
| incident_key | The incident key is used to reference the open incident which is to be accepted or resolved by this event. | Optional |
| summary | The event summary. Will be used as the event description in the incident timeline. | Optional |
Context Output#
There is no context output for this command.
Command Example#
!ilert-acknowledge-event incident_key="ctx312"
Human Readable Output#
Incident has been acknowledged.
ilert-resolve-event#
Resolves an existing event in iLert
Base Command#
ilert-resolve-event
Input#
| Argument Name | Description | Required |
|---|---|---|
| incident_key | The incident key is used to reference the open incident which is to be accepted or resolved by this event. | Optional |
| summary | The event summary. Will be used as the event description in the incident timeline. | Optional |
Context Output#
There is no context output for this command.
Command Example#
!iLert-resolve-event incident_key="ctx312"
Human Readable Output#
Incident has been resolved.