iLert
iLert Pack.#
This Integration is part of theiLert is a modern uptime platform with advanced on-call and alerting features.
Alert and notify users using iLert. This integration was integrated and tested with API version 1 of iLert.
#
Configure iLert on Cortex XSOARNavigate to Settings > Integrations > Servers & Services.
Search for iLert.
Click Add instance to create and configure a new integration instance.
Parameter Required Server URL True The API key of the alert source (for triggering events only) True Trust any certificate (not secure) False Use system proxy settings False Click Test to validate the URLs, token, and connection.
#
CommandsYou can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.
#
iLert-submit-eventCreates a new event/incident in iLert (in order to use this command you have to enter the Integration Key in the integration settings)
#
Base Commandilert-submit-event
#
InputArgument Name | Description | Required |
---|---|---|
incident_key | For ALERT events, the incident key can be used to deduplicate or group events. If an open incident with the key already exists, the event will be appended to the incident's event log. Otherwise a new incident will be created. For ACCEPT and RESOLVE events, the incident key is used to reference the open incident which is to be accepted or resolved by this event. | Optional |
event_type | Must be either ALERT, ACCEPT, or RESOLVE. Default is ALERT. | Optional |
summary | The event summary. Will be used as the incident summary if a new incident is created. | Optional |
details | The event details. Will be used as the incident details if a new incident is created. | Optional |
priority | Must be either HIGH or LOW. Will overwrite the evaluated priority of the alert source. | Optional |
#
Context OutputThere is no context output for this command.
#
Command Example!ilert-submit-event summary="Test incident"
#
Human Readable OutputIncident has been created.
#
ilert-acknowledge-eventAcknowledges an existing event in iLert
#
Base CommandiLert-acknowledge-event
#
InputArgument Name | Description | Required |
---|---|---|
incident_key | The incident key is used to reference the open incident which is to be accepted or resolved by this event. | Optional |
summary | The event summary. Will be used as the event description in the incident timeline. | Optional |
#
Context OutputThere is no context output for this command.
#
Command Example!ilert-acknowledge-event incident_key="ctx312"
#
Human Readable OutputIncident has been acknowledged.
#
ilert-resolve-eventResolves an existing event in iLert
#
Base Commandilert-resolve-event
#
InputArgument Name | Description | Required |
---|---|---|
incident_key | The incident key is used to reference the open incident which is to be accepted or resolved by this event. | Optional |
summary | The event summary. Will be used as the event description in the incident timeline. | Optional |
#
Context OutputThere is no context output for this command.
#
Command Example!iLert-resolve-event incident_key="ctx312"
#
Human Readable OutputIncident has been resolved.