Get started with Opsgenie as a user
Learn how to configure your profile, get notifications from Opsgenie and view on-call schedules.
Integrate Opsgenie with Threat Stack
What does Opsgenie offer Threat Stack users?
With the Threat Stack Integration, Opsgenie acts as a dispatcher for these alerts and determines the right people to notify based on on-call schedules– notifies via email, text messages (SMS), phone calls, and iPhone & Android push notifications, and escalates alerts until the alert is acknowledged or closed.
Functionality of the Integration
When an alert is created in Threat Stack, an alert is automatically created in Opsgenie.
Add Threat Stack Integration in Opsgenie
You can add this integration from your team dashboard
If you're using Opsgenie's Free or Essentials plan, or if you’re using Opsgenie with Jira Service Management's Standard plan, you can only add this integration from your team dashboard as the Integrations page under Settings is not available in your plan.
Adding the integration from your team dashboard will make your team the owner of the integration. This means Opsgenie will assign the alerts received through this integration to your team only.
To do that,
Go to your team’s dashboard from Teams,
Select Integrations, and select Add integration.
Follow the rest of the steps to complete the integration.
Go to Settings > Integrations. Search for Threat Stack and select Add.
Specify who is notified of Threat Stack alerts using the Responders field. Auto-complete suggestions are provided as you type.
Copy the Webhook URL.
Click Save Integration.
Configuration in Threat Stack
In Threat Stack, go to "Configurations" and select the "Integrations" tab.
Navigate to "Webhook API".
Fill in the Name and Description fields.
Paste the integration API URL copied previously into the "Webhook URL" field.
Select which severity level to fire alerts for in the "Alert Severity" field.
Click Save.
Sample payload sent from Threat Stack
JSON
1
2
3
4
5
6
7
8
9
{
"created_at": 1459447024000,
"id": "56fd65138c1e0c173af5a3de",
"organization_id": "545d0293b620cd090d000023",
"server_or_region": "Threat_Stack_Demo_Ubuntu1",
"severity": 3,
"source": "Host",
"title": "Threat Intelligence Activity: Communication to openbl by 185.110.132.54"
}
Was this helpful?