MS Teams Configuration

To send alert messages to MS Teams channels, you need to follow these steps:

Access Microsoft Teams

Ensure that you have the necessary permissions to create and configure connectors in the Teams channel you want to use. You may need to be a Team Owner or have administrator privileges.

Choose a Channel

Select the channel where you want to add the incoming webhook. Click on the channel name to access the channel settings.

Configure Incoming Webhook Connector

1. In the selected channel, click on the ellipsis (…) next to the channel name to open the menu.
   
   
   
2. From the menu, select “Connectors.”
3. In the Connectors screen, search for “Incoming Webhook” and click on it.
   
   
   
   
4. Click on the “Add” / “Configure”  button to configure a new incoming webhook.
5. Provide a name for the webhook, and optionally, upload an image or icon that represents the webhook.
   
   
   
   
6. Click the “Create” button to generate the webhook URL.
7. Copy the generated webhook URL to your clipboard. This URL is unique to your webhook and is used to send messages to the Teams channel.
   
   
   
   
8. Click the “Done” button to finish your webhook configuration.

Form an Alert Message

The alert message needs the necessary information to be present in it. The necessary information is picked from the alert document and embedded into the alert message.

Here is a sample alert message created using the sample alert document following it.

Alert Message

Alert '{{Alert-Rule-Name}}' triggered with severity '{{severity}}' at {{timestamp}}.

Description: {{description}}

Insights: {{R1>M1>insights}}

Sample Alert Doc

{
   "Alert-Rule-Name": "himaja_test_alert3",
   "doc_type": "alert",
   "tenant_id": "1",
   "bu_id": "1",
   "timeToDetect": 300.0,
   "severity": "critical",
   "level": "1",
   "Type": "himaja_test_summary_1",
   "description": "state:1206",
   "summary": "himaja_test_summary_1",
   "R1": {
       "M1": {
           "label": "state",
           "type": "number",
           "value_for_eval_duration": "1206",
           "formatted_value_for_eval_duration": "1206",
           "color": "#dd171d",
           "insights": "Need urgent attention!",
           "matched_threshold": "> 0"
       },
       "status": "Available",
       "name": "001testalert"
   },
   "tags": [
       "Others",
       "DAQ"
   ],
   "group_label": "himaja_test_alert3",
   "timestamp": "2022-05-23 14:55:04",
   "Day": "Monday",
   "@timestamp": "2022-05-23T14:55:04.000Z",
   "Alert-Rule-Evalution-Duration": "10 Minutes",
   "Enterprise Name": "VuNet Systems",
   "active_period_execution": true,
   "alert_id": "13463664",
   "alarm_state": "Notification",
   "start_time": "2022-05-23T14:55:04.000Z",
   "type": "himaja_test_summary_1",
   "index_prefix": "vunet-1-1-alert-stats"
}

Further Reading

1. WhatsApp Configuration
2. Slack Configuration