Azure Monitor

Azure Monitor collects telemetry data from both on-premises and Azure cloud service as well as collects log data from management tools. Azure Monitor then allows you to build alerts rules based on this information.

By configuring a webhook action in an Azure Monitor action group, you are able to forward alerts to be normalized and transmitted to BigPanda. BigPanda then processes and correlates the alerts from Azure Monitor with alerts from other sources to create and maintain up-to-date incidents in BigPanda.

👍

Open Integration Manager

The Open Integration Manager is available for use with Azure Monitor. For more information, see the Open Integration Manager documentation.

❗

️Payload Size

Alert payloads must be 6MB or smaller. Larger payloads will fail to process with BigPanda. We recommend reviewing your configurations to ensure that only actionable, useful information is being sent to BigPanda.

Key Features

• Uses native webhook notification channel in Azure Monitor to forward alerts to BigPanda.
• Automatically resolves incidents in BigPanda when they resolve in Azure Monitor.
• Supports all Azure Monitor alert types (metric, log v1/v2, activity log) via the Common Alert Schema.
• Intelligently correlates alerts from Azure Monitor to help you understand and respond faster to production issues.

Install the Integration

Administrators can install the integration by following the on-screen instructions in BigPanda.

❗️

Azure Security Levels

By default, BigPanda disregards sev4 Azure alerts if the signalType is not Activity Log. These alerts will not create BigPanda incidents or appear in your incident feed.

📘

Deduplication

The standard Azure Monitor integration uses the incident_identifier value of alertid for deduplication.

Setup Webhook Action in Azure Monitor

1. Log in to the Azure portal and navigate to Monitor > Alerts > Manage Actions.

2. Create a new action group or select an existing action group.

3. Add a new webhook action with the following details:

   • Webhook URL: https://integrations.bigpanda.io/azure_monitor_v2/alerts?access_token=<Your Org Bearer Token>EN&app_key=<Your App Key>
   • Use Common Alert Schema: Enabled (checked)

4. Save your changes.

5. Ensure that all of the alert rules you wish to send to BigPanda are configured with this action group.

Delete the Integration

Deleting an integration requires that you remove the integration in both the integrated system and BigPanda. We recommend that you first uninstall the integration on the integrated system to prevent traffic from being sent and rejected by BigPanda, since the app key will not exist once you delete the integration in BigPanda.

❗️

Caution During Replacement

When replacing an existing integration with a new tool or system, we recommend configuring the new integration first to ensure no data is lost.

Deactivate Inbound Integration

If you want to stop sending data to BigPanda but don’t want to delete your integration, you can temporarily deactivate it.

This feature is currently only available for inbound integrations.

To deactivate an inbound integration:

1. In BigPanda, navigate to the Integrations tab and select the desired integration from the list. This will open integration details on the right side of the window.
2. At the top of the integration details, click the Active/Inactive toggle next to the application name to change the status of the integration.

In the integrations list, inactive integrations will be marked with a gray bar.

Stop Sending Data to BigPanda

Within the integrated system, disable any settings that send data to BigPanda.

Each system requires specific changes to disable the integration with BigPanda. For example, you must delete the topic in CloudWatch, and you must disable the alert channel in New Relic. To determine the changes for your integrated system, reference the relevant documentation or contact BigPanda support.

Remove Action from Azure Monitor

1. Sign in to the Azure portal and navigate to Monitor > Alerts > Manage Actions.
2. Select your Action Group with the BigPanda webhook action added.
3. Remove the BigPanda webhook action.

Delete the Integration in BigPanda

Take the following steps to delete the integration from BigPanda:

1. In BigPanda, navigate to the Integrations tab and select the desired integration from the list.
2. In the integration details on the right of the page, click the trash icon, then confirm you want to delete the integration. The integration will be removed immediately.

👍

️Automatic Alert Resolution for Deleted Integrations

All active alerts from the integration will be resolved after deletion.

❗️

Data Removal

This procedure does not remove any data from the integrated system.