iLert

Details

ID	`iLert`
Provider	Ilert GmbH
Category	Messaging and Conferencing
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.10116658`
Supported Modules	Agentix XSIAM

README

iLert is a modern uptime platform with advanced on-call and alerting features.

Alert and notify users using iLert.
This integration was integrated and tested with API version 1 of iLert.

Configure iLert on Cortex XSOAR

Navigate to Settings > Integrations > Servers & Services.
Search for iLert.

Click Add instance to create and configure a new integration instance.

Parameter	Required
Server URL	True
The API key of the alert source (for triggering events only)	True
Trust any certificate (not secure)	False
Use system proxy settings	False

Click Test to validate the URLs, token, and connection.

Commands

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

iLert-submit-event

Creates a new event/incident in iLert (in order to use this command you have to enter the Integration Key in the integration settings)

Base Command

ilert-submit-event

Input

Argument Name	Description	Required
incident_key	For ALERT events, the incident key can be used to deduplicate or group events. If an open incident with the key already exists, the event will be appended to the incident’s event log. Otherwise a new incident will be created. For ACCEPT and RESOLVE events, the incident key is used to reference the open incident which is to be accepted or resolved by this event.	Optional
event_type	Must be either ALERT, ACCEPT, or RESOLVE. Default is ALERT.	Optional
summary	The event summary. Will be used as the incident summary if a new incident is created.	Optional
details	The event details. Will be used as the incident details if a new incident is created.	Optional
priority	Must be either HIGH or LOW. Will overwrite the evaluated priority of the alert source.	Optional

Context Output

There is no context output for this command.

Command Example

!ilert-submit-event summary="Test incident"

Human Readable Output

Incident has been created.

ilert-acknowledge-event

Acknowledges an existing event in iLert

Base Command

iLert-acknowledge-event

Input

Argument Name	Description	Required
incident_key	The incident key is used to reference the open incident which is to be accepted or resolved by this event.	Optional
summary	The event summary. Will be used as the event description in the incident timeline.	Optional

Context Output

There is no context output for this command.

Command Example

!ilert-acknowledge-event incident_key="ctx312"

Human Readable Output

Incident has been acknowledged.

ilert-resolve-event

Resolves an existing event in iLert

Base Command

ilert-resolve-event

Input

Argument Name	Description	Required
incident_key	The incident key is used to reference the open incident which is to be accepted or resolved by this event.	Optional
summary	The event summary. Will be used as the event description in the incident timeline.	Optional

Context Output

There is no context output for this command.

Command Example

!iLert-resolve-event incident_key="ctx312"

Human Readable Output

Incident has been resolved.

Configuration parameters

url — Server URL (required)
integrationKey — The API key of the alert source (for triggering events only) (required)
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings

Commands (3)

ilert-acknowledge-event
Acknowledges an existing event in iLert
ilert-resolve-event
Resolves an existing event in iLert
ilert-submit-event
Creates a new event/incident in iLert (in order to use this command you have to enter the Integration Key in the integration settings)

Source

ILert.py ILert_test.py ILert.yml ILert_description.md

Download History Raw

import demistomock as demisto
import pytest

PARAMS = {"url": "https://test.com", "integrationKey": "mock_key"}


@pytest.fixture(autouse=True)
def set_params(mocker):
    mocker.patch.object(demisto, "params", return_value=PARAMS)


def test_submit_new_event_command(requests_mock):
    from ILert import submit_new_event_command

    kwargs = {"summary": "mock_summary"}
    requests_mock.post("https://test.com/events", json={})
    result = submit_new_event_command(**kwargs)
    assert result == "Incident has been created"


def test_submit_acknowledge_event_command(requests_mock):
    from ILert import submit_acknowledge_event_command

    kwargs = {"summary": "mock_summary", "incident_key": "mock_key"}
    requests_mock.post("https://test.com/events", json={})
    result = submit_acknowledge_event_command(**kwargs)
    assert result == "Incident has been acknowledged"


def test_submit_resolve_event_command(requests_mock):
    from ILert import submit_resolve_event_command

    kwargs = {"summary": "mock_summary", "incident_key": "mock_key"}
    requests_mock.post("https://test.com/events", json={})
    result = submit_resolve_event_command(**kwargs)
    assert result == "Incident has been resolved"