Opsgenie Incident Management Integrations

Features

• You can configure Skylar Automated RCA to automatically add Root Cause (RCA) reports to incidents in Opsgenie. This allows you to see details of root cause and direct the incident to the appropriate team.
• Each Skylar Automated RCA report includes a summary, a word cloud, and a set of log events showing symptoms and root cause, plus a link to the full report in the Skylar Automated RCA user interface.
• This leads to faster Mean Time to Repair (MTTR) and less time manually hunting for root cause.

How it Works

The recommended mode of operation for incident management integrations is to use the Skylar Automated RCA Augment mode as an accurate mechanism for explaining the reason something went wrong. In this mode, you continue to use your existing rules as the primary source of problem detection and incident creation. You can then review Skylar Automated RCA report findings directly in the incident that was created by Opsgenie to explain the reason behind the incident.

The Skylar Automated RCA Auto-Detect mode is useful when you want to direct all Root Cause reports to Opsgenie for routing and dispositioning. You can also use Auto-Detect mode when you want to send only specific Root Cause reports to Opsgenie after first reviewing them in the Skylar Automated RCA user interface.

The two modes of operation are independent. You can configure Augment and/or Auto-Detect modes depending on your operational use case.

Augment: Receive Signals from Opsgenie Incidents

1. Any Opsgenie incident can trigger a webhook request for Root Cause Analysis from Skylar Automated RCA.
2. Skylar Automated RCA finds anomalous log patterns from your application that coincide with the incident and creates a Root Cause report.
3. Root Cause report summaries are sent to Opsgenie using the notes API, and Root Cause details are visible in your Opsgenie incident.
4. With a single click on your incident, you can drill down further into the Skylar Automated RCA user interface to look at correlated logs across your entire application.

For details, see Receiving Signals from Opsgenie.

Auto-Detect: Send Root Cause Detections to Opsgenie as Incidents

1. The Skylar AI continuously monitors all application logs and uses unsupervised machine learning to find anomalous log patterns that indicate a problem. These are automatically turned into Root Cause reports highlighting details of any problems with over 95% accuracy.
2. Root Cause report summaries are sent to Opsgenie using the webhook interface, and the Root Cause details are visible as incidents in Opsgenie.
3. With a single click on your incident, you can drill down further into the Skylar Automated RCA user interface to look at correlated logs across your entire application.

For details, see Sending Root Cause Detections to Opsgenie as Incidents.

Sending Root Cause Detections to Opsgenie as Incidents

This incident management integration automatically sends a Root Cause (RCA) report to Opsgenie so that the appropriate team is notified when the Skylar AI auto-detects an incident .

STEP 1: Add the Skylar Integration to your Opsgenie Team

1. In the Opsgenie user interface, click the Teams tab to access your Team dashboard.
2. Click the desired Team for the integration.
3. Click the Integrations section from the left-hand navigation pane.
4. Click the Add integration button.
5. Click the Add button under the Skylar Automated RCA integration icon.
6. Make a note of the Webhook URL in the Skylar section of the Integration Setup page. You will use this in STEP 2, below.
7. In the Settings section, update the Name as desired.
8. Make sure that the Enabled checkbox is selected.
9. Click Save Integration.

STEP 2: Create an Opsgenie Integration in Skylar Automated RCA to Send Root Cause Detections to Opsgenie as Incidents

1. In the Skylar Automated RCA user interface, go to the Integrations & Collectors page (Settings () > Integrations & Collectors).
2. In the Incident Management section, click the Opsgenie button.
3. Click Create a New Integration button. The Create Opsgenie Incident Management dialog appears.
4. On the General tab, enter an Integration Name for this integration.
5. In the Deployment drop-down, select a deployment for the integration.
6. In the Service Group(s) drop-down, select a service group for the integration.
7. On the Send Detections tab, click Enabled.
8. Enter the Opsgenie Webhook URL that you created in STEP 1, above.
9. You can choose to send notifications the first time the Skylar AI detects a new type of proactive Root Cause report. We recommend setting the Send on 1st occurrence toggle to Yes for proactive notification of potential new problems. If you want to be notified on subsequent occurrences, do this from the relevant Root Cause report.
10. Click Save.