About Using Webhooks to Send Alerts to Third-Party Products

You can send vRealize Log Insight user alerts to third-party products by using webhooks.

vRealize Log Insight uses webhooks to send alerts over HTTP POST to other applications. vRealize Log Insight sends a webhook in its own proprietary format, but third-party solutions expect incoming webhooks to be in their proprietary format. To use information sent with vRealize Log Insight webhooks, the third-party application must have either native support for the vRealize Log Insight format or you must create a mapping between vRealize Log Insight formats and the format used by the third-party. The mapping, or shim, translates, or maps, the vRealize Log Insight format to a different format.

Alerts created with message queries, alerts created with aggregate queries, and system notifications each have their own webhook format.

HTTP basic authentication is supported. Embed credentials in the url using the form {{https://username:password@hostname/path}}

The vRealize Log Insight webhook implementation makes outbound HTTP requests to a remote server. The server may report success or failure. vRealize Log Insight retries failed requests. All HTTP/2xx status code responses are considered successful and all other responses, including timeouts or refused connections, are considered failures to be retried later.

You must be a vRealize Log Insight administrator to create system notifications.