Kibana Webhooks

Please note that when installing Kibana with Webhook auto instrumentation, Keep installs itself as a Connector, adds itself as an Action to all available Kibana Alert Rules (For each alert, On status changes, when: Alert/No Data/Recovered) and to all available Kibana Watcher rules as a Webhook action.

For more information, feel free to reach out on our Slack Community.

Inputs

No information yet, feel free to contribute it using the “Edit this page” link at the bottom of the page

Outputs

No information yet, feel free to contribute it using the “Edit this page” link at the bottom of the page

Authentication Parameters

The api_key and kibana_host are required for connecting to the Kibana provider. You can obtain them as described in the “Connecting with the Provider” section. kibana_port can be used to override the default Kibana port (9243)

Connecting with the Provider

Kibana Host

Simply copy the hostname from the URL bar in your browser:

API Key

To obtain a Kibana API key, follow these steps:

  1. Log in to your Kibana account.
  2. Click Stack Management
  3. Click on Security
  4. Click on API Keys
  1. Click on the top right Create API key button
  2. Give the API key and indicative name (e.g. keep-api-key)
  3. Make sure the Restrict Permissions toggle is not toggeled
  4. On the bottom right corner, click on Create API key
  1. Copy the newly created encoded API key and you’re set!

Fingerprinting

Fingerprints in Kibana are simply the alert instance ID.

Scopes

Certain scopes may be required to perform specific actions or queries via the Datadog Provider. Below is a summary of relevant scopes and their use cases:

  • rulesSettings:read (Read alerts) Required: True Description: Read alerts.
  • rulesSettings:write (Modify Alerts) Required: True Description: Modify alerts.
  • actions:read (Read connectors) Required: True Description: Read connectors.
  • actions:write (Write connectors) Required: True Description: Write connectors.

Notes

No information yet, feel free to contribute it using the “Edit this page” link at the bottom of the page