You can configure the Webhook serve in VMware Aria Operations for Logs.
Procedure
- Log in to VMware Aria Operations for Logs and from the left pane, select Webhook under Alerts.
- On the Webhook page, click New Webhook to add a new webhook.
- Enter the required details.
Name VMware Aria Operations for Networks Dropped Flow Alert Endpoint Custom Webhook URL Copied from Operations for Networks add source page. For example, https://webhook_user:*****************@vrni-appliance/webhooks/loginsight/alert Content Type JSON Action Post Webhook Payload { "AlertType": 1, "AlertName": "${AlertName}", "SearchPeriod": ${SearchPeriod}, "HitOperator": ${NumHits}, "messages": ${messages} }
Note: Ensure to add the Webhook payload exactly as given above. - Update the /etc/hosts file to connect VMware Aria Operations for Networks with the Webhook server.
Note: You must have the sudo/root permission to update the /etc/hosts file.For example,
ssh [email protected] VMware Aria Operations for Logs [email protected]'s password: Last login: Tue Jun 14 03:31:14 UTC 2022 from 172.31.1.73 on pts/0 Last login: Tue Jun 14 09:15:08 2022 from 172.31.1.46 root@vRLI-8 [ ~ ]# cat /etc/hosts # Begin /etc/hosts (network card version) # End /etc/hosts (network card version) # VAMI_EDIT_BEGIN # Generated by Studio VAMI service. Do not modify manually. 127.0.0.1 vRLI-8 localhost 10.253.241.206 vrni-appliance ::1 vRLI-8 localhost ipv6-localhost ipv6-loopback # VAMI_EDIT_END root@vRLI-8 [ ~ ]#