Cloud Monitor:Configure callbacks for system event-triggered alerts (recommended)

Background information

Cloud Monitor sends alert notifications to the specified URL by using the HTTP or HTTPS POST method. You must add the following CIDR blocks to the whitelist of your firewall. After you receive alert notifications, you can resolve issues based on the content of the alert notifications.

Procedure

1. Create a push channel.

   In this topic, a webhook URL is used as a push channel.

   1. Log on to the Cloud Monitor console.

   2. In the left-side navigation pane, choose Event Center > Event Subscription.

   3. On the Event Subscription page, click the Push Channel tab.

   4. On the Push Channel tab, click Create Push Channel.

   5. In the Create Push Channel panel, enter a channel name, set Target type to Webhook, set Request method to POST, set Data format to JSON, and set the Address parameter to the callback URL. Leave other parameters empty.

   6. Click OK.

2. Create a subscription policy.

   In this topic, a system event that is related to Elastic Compute Service (ECS) instances and named Instance:InstanceFailure.Reboot:Executing is subscribed to and pushed to a webhook URL.

   1. Click the Subscription Policy tab.

   2. On the Subscription Policy tab, click Create Subscription Policy.

   3. On the Create Subscription Policy page, configure the parameters.

      • Basic information: Enter a name for the subscription policy.

        • Alert Subscription: Set the Subscription Type parameter to System Events. In the Subscription Scope section, set the Products parameter to Elastic Compute Service (ECS) and the Event name parameter to Instance:InstanceFailure.Reboot:Executing. Leave other parameters empty. The Instance:InstanceFailure.Reboot:Executing event indicates that the system events of all ECS instances within the current Alibaba Cloud account are restarted due to instance failures.

          Note

          For more information about the system events supported by ECS instances, see Elastic Compute Service (ECS).

      • Combined Noise Reduction: Use the default settings.

      • Notification: Leave the Notification Configuration parameter empty. Use the default settings of the Custom Notification Method parameter.

        Note

        As no alert contact group is set for the Notification Configuration parameter, no alert contacts receive alert notifications.

      • Push and Integration: Select the push channel created in Step 1.

   4. Click Submit.

3. Debug event subscription.

   1. On the Subscription Policy tab, click Debug Event Subscription.

   2. In the Create Event Debugging panel, set the Products parameter to Elastic Compute Service (ECS) and the Name parameter to Instance:InstanceFailure.Reboot:Executing.

      Cloud Monitor automatically generates the debugging content in the JSON format.

   3. Click OK.

      The Operation successful message is returned. Cloud Monitor automatically sends a test alert notification to the specified webhook URL.

Result

If a system event triggers an alert, Cloud Monitor sends the alert information to the specified webhook URL. The request methods supported by the webhook URL include POST and GET. Examples:

• POST JSON

  Parameter name: body.

  Sample code:

  {
    "userInfo": {
      "aliyunId": "test",
      "userIdSec": "te***st",
      "aliyunIdSec": "test***test",
      "nickName": "test",
      "nickNameSec": "te***st",
      "userName": "test",
      "userId": "test",
      "userNameSec": "te***st"
    },
    "subscription": {
      "subscriptionUuid": "testid",
      "conditions": [
        {
          "field": "source",
          "op": "EQ",
          "value": "SYS_EVENT"
        },
        {
          "field": "product",
          "op": "IN",
          "value": "ECS,Redis,RDS,Config,tag"
        }
      ],
      "relation": "AND"
    },
    "batchId": "testbatchid",
    "alert": {
      "alertStatus": "TRIGGERED",
      "groupId": "",
      "source": "SYS_EVENT",
      "eventContentMap": {
        "extensions": {
          "agentVersion": "test-version",
          "region": "cn-hangzhou",
          "azone": "cn-hangzhou-i",
          "uptime": 23000
        },
        "vmName": "i-testhost",
        "impact": "Alert",
        "opsCode": "InstanceStatusChange",
        "bizEventId": "test-event-id"
      },
      "dedupId": "test-id",
      "eventName": "CloudAssistant:FirstHeartbeat",
      "arn": "acs:ecs:cn-hangzhou:testuser:instance/i-testhost",
      "timestamp": 1704780333000,
      "traceId": "testid",
      "severity": "INFO",
      "product": "ECS",
      "eventRawContent": "{}",
      "eventType": "Notification",
      "userId": "test",
      "meta": {
        "sysEventMeta": {
          "regionNameEn": "cn-hangzhou",
          "resourceId": "acs:ecs:cn-hangzhou:test:instance/i-testhost",
          "product": "ECS",
          "eventNameEn": "CloudAssistant:FirstHeartbeat",
          "instanceName": "i-testhost",
          "level": "INFO",
          "resource": "",
          "regionNameZh": "China (Hangzhou)",
          "groupId": "",
          "serviceTypeEn": "ECS",
          "eventType": "Notification",
          "serviceTypeZh": "Elastic Compute Service (ECS)",
          "regionId": "cn-hangzhou",
          "eventTime": "20240109T140533.642+0800",
          "name": "CloudAssistant:FirstHeartbeat",
          "id": "testid",
          "status": "Normal",
          "eventNameZh": "CloudAssistant:FirstHeartbeat"
        }
      }
    },
    "severity": "INFO",
    "strategyName": "eventwebhook",
    "userId": "test",
    "time": 1704780333000
  }

• GET JSON

  Parameter name: data.

  Sample code:

  {
    "userInfo": {
      "aliyunId": "test",
      "userIdSec": "te***st",
      "aliyunIdSec": "test***test",
      "nickName": "test",
      "nickNameSec": "te***st",
      "userName": "test",
      "userId": "test",
      "userNameSec": "te***st"
    },
    "subscription": {
      "subscriptionUuid": "testid",
      "conditions": [
        {
          "field": "source",
          "op": "EQ",
          "value": "SYS_EVENT"
        },
        {
          "field": "product",
          "op": "IN",
          "value": "ECS,Redis,RDS,Config,tag"
        }
      ],
      "relation": "AND"
    },
    "batchId": "testbatchid",
    "alert": {
      "alertStatus": "TRIGGERED",
      "groupId": "",
      "source": "SYS_EVENT",
      "eventContentMap": {
        "extensions": {
          "agentVersion": "test-version",
          "region": "cn-hangzhou",
          "azone": "cn-hangzhou-i",
          "uptime": 23000
        },
        "vmName": "i-testhost",
        "impact": "Alert",
        "opsCode": "InstanceStatusChange",
        "bizEventId": "test-event-id"
      },
      "dedupId": "test-id",
      "eventName": "CloudAssistant:FirstHeartbeat",
      "arn": "acs:ecs:cn-hangzhou:testuser:instance/i-testhost",
      "timestamp": 1704780333000,
      "traceId": "testid",
      "severity": "INFO",
      "product": "ECS",
      "eventRawContent": "{}",
      "eventType": "Notification",
      "userId": "test",
      "meta": {
        "sysEventMeta": {
          "regionNameEn": "cn-hangzhou",
          "resourceId": "acs:ecs:cn-hangzhou:test:instance/i-testhost",
          "product": "ECS",
          "eventNameEn": "CloudAssistant:FirstHeartbeat",
          "instanceName": "i-testhost",
          "level": "INFO",
          "resource": "",
          "regionNameZh": "China (Hangzhou)",
          "groupId": "",
          "serviceTypeEn": "ECS",
          "eventType": "Notification",
          "serviceTypeZh": "Elastic Compute Service (ECS)",
          "regionId": "cn-hangzhou",
          "eventTime": "20240109T140533.642+0800",
          "name": "CloudAssistant:FirstHeartbeat",
          "id": "testid",
          "status": "Normal",
          "eventNameZh": "CloudAssistant:FirstHeartbeat"
        }
      }
    },
    "severity": "INFO",
    "strategyName": "eventwebhook",
    "userId": "test",
    "time": 1704780333000
  }

• POST FORM and GET FORM

  Parameter	Description
  userInfo	{ "aliyunId": "test", "userIdSec": "te***st", "aliyunIdSec": "test***test", "nickName": "test", "nickNameSec": "te***st", "userName": "test", "userId": "test", "userNameSec": "te***st" }
  subscription	{ "subscriptionUuid": "testid", "conditions": [ { "field": "source", "op": "EQ", "value": "SYS_EVENT" }, { "field": "product", "op": "IN", "value": "ECS,Redis,RDS,Config,tag" } ], "relation": "AND" }
  alert	{ "alertStatus": "TRIGGERED", "groupId": "", "source": "SYS_EVENT", "eventContentMap": { "extensions": { "agentVersion": "test-version", "region": "cn-hangzhou", "azone": "cn-hangzhou-i", "uptime": 23000 }, "vmName": "i-testhost", "impact": "Alert", "opsCode": "InstanceStatusChange", "bizEventId": "test-event-id" }, "dedupId": "test-id", "eventName": "CloudAssistant:FirstHeartbeat", "arn": "acs:ecs:cn-hangzhou:testuser:instance/i-testhost", "timestamp": 1704780333000, "traceId": "testid", "severity": "INFO", "product": "ECS", "eventRawContent": "{}", "eventType": "Notification", "userId": "test", "meta": { "sysEventMeta": { "regionNameEn": "cn-hangzhou", "resourceId": "acs:ecs:cn-hangzhou:test:instance/i-testhost", "product": "ECS", "eventNameEn": "CloudAssistant:FirstHeartbeat", "instanceName": "i-testhost", "level": "INFO", "resource": "", "regionNameZh": "China (Hangzhou)", "groupId": "", "serviceTypeEn": "ECS", "eventType": "Notification", "serviceTypeZh": "Elastic Compute Service (ECS)", "regionId": "cn-hangzhou", "eventTime": "20240109T140533.642+0800", "name": "CloudAssistant:FirstHeartbeat", "id": "testid", "status": "Normal", "eventNameZh": "CloudAssistant:FirstHeartbeat" } } }
  severity	INFO
  strategyName	eventwebhook
  userId	test
  time	1704780333000

Return fields

References

• Use the alert callback feature to send notifications about threshold-triggered alerts

• Receive alert notifications in the PagerDuty console