can not find old Post | Community Feedback

Unavailable member

·3 years ago

Their profile isn't available.

Thank you @Kevin Ford

Kevin Ford

·3 years ago

I’ve just re-posted the article here:

https://community.logicmonitor.com/product-discussions-22/example-script-for-automated-alert-actions-via-external-alerting-3444

Unavailable member

·3 years ago

Their profile isn't available.

This one has me stumped. I have logged a ticket to see if engineering can locate it.

LM User

·3 years ago

That’s on the old community, which is not accessible. But with this info, maybe @A11ey can find it and unarchive it.

Rattana

OP3 years ago

one of your support persons to whom we submitted a different issue has found it. David Torres case number(#418762

Kevin Ford

·3 years ago

Until we can locate the original article, I’ll post it’s PowerShell script here. The key instructions are in the comments at the top of the script.

# ----<br/># This PowerShell script can be used as a starting template for enabling<br/># automated remediation for alerts coming from LogicMonitor.<br/># In LogicMonitor, you can use the External Alerting feature to pass all alerts<br/># (or for a specific group of resources) to this script.<br/># ----<br/># To use this script:<br/>#    1. Drop this script onto your Collector server under the Collector's agent/lib directory.<br/>#    2. In your LogicMonitor portal go to Settings, then click External Alerting.<br/>#    3. Click the Add button.<br/>#    4. Set the 'Groups' field as needed to limit the actions to a specific group of resources.<br/>#    5. Choose the appropriate Collector in the 'Collector' field.<br/>#    6. Set 'Delivery Mechanism' to "Script"<br/>#    7. Enter "alert_central.ps1" in the 'Script' field.<br/>#    8. Paste the following into the 'Script Command Line' field:<br/>#       "##ALERTID##" "##ALERTSTATUS##" "##LEVEL##" "##HOSTNAME##" "##DSNAME##" "##INSTANCE##" "##DATAPOINT##" "##VALUE##" "##ALERTDETAILURL##" "##DPDESCRIPTION##"<br/>#    9. Click Save.<br/><br/>Param ($alertID = "", $alertStatus = "", $severity = "", $hostName = "", $dsName = "", $instance = "", $datapoint = "", $metricValue = "", $alertURL = "", $dpDescription = "")<br/><br/>###--- SET THE FOLLOWING VARIABLES AS APPROPRIATE ---###<br/># LogicMonitor API account information - the API user will need "Acknowledge" permissions...<br/>$accessId = ''<br/>$accessKey = ''<br/>$company = ''<br/># OPTIONAL: Set a filename in the following variable if you want specific alerts logged. (example: "C:\lm_alert_central.log")...<br/>$logFile = ""<br/>########################################################<br/><br/><br/># Function for logging the alert to a local text file if one was specified in the $logFile variable above...<br/>Function LogWrite ($logstring = "")<br/>{<br/>	if ($logFile -ne "") {<br/>		Add-content $logFile -value $logstring<br/>	}<br/>}<br/><br/># Function for attaching a note to the alert...<br/>function AddNoteToAlert ($alertID = "", $note = "")<br/>{<br/>	# Encode the note...<br/>	$encodedNote = $note | ConvertTo-Json<br/><br/>	<# API and URL request details #><br/>	$httpVerb = 'POST'<br/>	$resourcePath = '/alert/alerts/' + $alertID + '/note'<br/>	$url = 'https://' + $company + '.logicmonitor.com/santaba/rest' + $resourcePath<br/>	$data = '{"ackComment":' + $encodedNote + '}'<br/><br/>	<# Get current time in milliseconds #><br/>	$epoch = [Math]::Round((New-TimeSpan -start (Get-Date -Date "1/1/1970") -end (Get-Date).ToUniversalTime()).TotalMilliseconds)<br/><br/>	<# Concatenate General Request Details #><br/>	$requestVars_00 = $httpVerb + $epoch + $data + $resourcePath<br/><br/>	<# Construct Signature #><br/>	$hmac = New-Object System.Security.Cryptography.HMACSHA256<br/>	$hmac.Key = [Text.Encoding]::UTF8.GetBytes($accessKey)<br/>	$signatureBytes = $hmac.ComputeHash([Text.Encoding]::UTF8.GetBytes($requestVars_00))<br/>	$signatureHex = [System.BitConverter]::ToString($signatureBytes) -replace '-'<br/>	$signature = [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($signatureHex.ToLower()))<br/><br/>	<# Construct Headers #><br/>	$auth = 'LMv1 ' + $accessId + ':' + $signature + ':' + $epoch<br/>	$headers = New-Object "System.Collections.Generic.Dictionary[[String],[String]]"<br/>	$headers.Add("Authorization",$auth)<br/>	$headers.Add("Content-Type",'application/json')<br/><br/>	<# Make Request to add collector#><br/>	$response = Invoke-RestMethod -Uri $url -Method $httpVerb -Body $data -Header $headers<br/>	# Write-Host "API call response: $response"<br/>}<br/><br/><br/><br/># Placeholder variable for capturing any note we want to attach back to the alert...<br/>$alertNote = ""<br/><br/><br/># --------------------<br/>### CUSTOMIZE THE FOLLOWING AS NEEDED TO HANDLE SPECIFIC ALERTS FROM LOGICMONITOR...<br/><br/># Actions to take if the alert is new or re-opened (note: status will be "active" or "clear")...<br/>if ($alertStatus -eq 'active') {<br/><br/>	# Perform actions based on the type of alert...<br/>	if ($dsName -eq 'HTTPS-' -and $datapoint -eq 'CantConnect') {<br/>		# Insert action here to take if there's a website error.<br/><br/>		# Attach a note to the LogicMonitor alert...<br/>		$alertNote = "Action X performed on this alert"<br/><br/>	} elseif ($dsName -eq 'Ping' -and $datapoint -eq 'PingLossPercent') {<br/>		# Insert action to take if a device becomes unpingable.<br/>		$job = ping -c 4 $hostName<br/><br/>		# Restore line feeds to the output...<br/>		$job = [string]::join("`n", $job)<br/><br/>		# Add ping results as a note on the alert...<br/>		$alertNote = "Ping results: $job"<br/>	}<br/><br/>}<br/><br/><br/># --------------------<br/># Update the LogicMonitor alert if 'alertNote' is true...<br/>if ($alertNote -ne "") {<br/>	AddNoteToAlert $alertID $alertNote<br/>	# Optionally log the alert (if a filename is given in the $logFile variable)...<br/>	LogWrite "$alertID, $alertStatus, $severity, $hostName, $dsName, $instance, $datapoint, $metricValue, $alertURL, $dpDescription"<br/>}<br/>

Kevin Ford

·3 years ago

I was the author of the original post & can’t find it either. 😩

Rattana

OP3 years ago

No that is not the article. Thank you for following up with support on this, I’ll wait for your reply.

Unavailable member

·3 years ago

Their profile isn't available.

@Rattana Is this it by chance? If not I will log a ticket with support to see if we can locate it. All content was migrated.

https://community.logicmonitor.com/archive-13/external-alerting-script-medium-for-self-heal-actions-2008

Rattana

OP3 years ago

@A11ey the correct article is https://communities.logicmonitor.com/topic/6279-example-script-for-automated-alert-actions-via-external-alerting/

Please let me know where I can find it.

Unavailable member

·3 years ago

Their profile isn't available.

@Rattana was the article mentioned above the correct article? If yes I can move t to our active Product Discussions.

Also, FYI I moved this post to the Community Feedback group and out of the CustomerAdvocacy group)

@Stuart Weenig @Mark Hensler Forums/Archive/Archive is a technical issue. You have to go to the higher level Forums/Archive. I have a ticket logged for this issue.

Mark_Hensler

·3 years ago

Great find, @Michael Raymond. I didn't notice that.

Forums/Archive has stuff for me. Forums/Archive/Archive has nothing for me.

Yes. I see the same.

LM User

·3 years ago

Forums/Archive has stuff for me. Forums/Archive/Archive has nothing for me.

Michael Raymond

·3 years ago

This one?

https://community.logicmonitor.com/archive-13/taking-automated-actions-on-alerts-2000

Nope. It has very detailed breakdown of the script and all steps needed.

But this is interesting.

There’s Forum > Archive https://community.logicmonitor.com/archive-12

and there’s Forum > Archive > Archive https://community.logicmonitor.com/archive-13

LM User

·3 years ago

This one?

https://community.logicmonitor.com/archive-13/taking-automated-actions-on-alerts-2000

Michael Raymond

·3 years ago

When I navigate to the Archive, I see no content. Is this the expected behavior?

hmm I see posts just fine:

I’ll defer to @A11ey on this 😁

Michael Raymond

·3 years ago

Search def does search archive

However, I also can’t find this post… which makes me sad bc Support will ofter refer folks to this post for this exact ask (which is fairly frequent).

My guess is that something funky happened with the migration?

Mark_Hensler

·3 years ago

When I navigate to the Archive, I see no content. Is this the expected behavior?

LM User

·3 years ago

It should have been migrated from the old community to the new one, but it may have been archived. I can’t find it in search. @A11ey , does search not search through the archives?

1	SUYASH GAIKWAD
2	RR Robin Ratcliffe
3	AH Alejandra Herrera
4	HS Hunter Sparks
5	LT Lily Trbovic
6	AG Asher Guinzy