Edge Delta Grokstream AIOps Destination

Overview

The Grokstream AIOps destination sends signals and alerts over HTTP to Grokstream AIOps. This trigger-based destination enables forwarding Edge Delta alerts to Grokstream for AIOps-driven incident management and automation.

• incoming_data_types: signal

Example Configuration

This configuration defines an Edge Delta output node named grokstream_alerts that sends signals to a Grokstream AIOps endpoint. It uses a customizable payload template with Go template variables to format alert data, and includes a 5-minute suppression window to prevent duplicate notifications.

nodes:
  - name: grokstream_alerts
    type: grokstream_aiops_output
    endpoint: "https://example.com/grokstream_endpoint"
    suppression_window: 5m
    payload: |
      {
        "alert_title": "{{ .item.signal.title }}",
        "description": "{{ .item.signal.description }}",
        "host": "{{ index .item.resource \"host.name\" }}",
        "source": "{{ index .item.resource \"ed.source_name\" }}",
        "value": {{ .item.signal.value }},
        "threshold": {{ .item.signal.threshold_value }},
        "timestamp": "{{ .item.timestamp }}"
      }      

Required Parameters

name

A descriptive name for the node. This is the name that will appear in pipeline builder and you can reference this node in the YAML using the name. It must be unique across all nodes. It is a YAML list element so it begins with a - and a space followed by the string. It is a required parameter for all nodes.

nodes:
  - name: <node name>
    type: <node type>

type: grokstream_aiops_output

The type parameter specifies the type of node being configured. It is specified as a string from a closed list of node types. It is a required parameter.

nodes:
  - name: <node name>
    type: <node type>

endpoint

Grokstream AIOps endpoint URL where signals will be sent.

nodes:
  - name: <node name>
    type: grokstream_aiops_output
    endpoint: https://example.com/grokstream_endpoint
    payload: |
      <payload template>      

payload

Payload template used to format the content of the Grokstream AIOps request. The template uses Go template syntax with access to signal data through the .item object.

See the Webhook destination for a complete reference of available template variables and functions.

nodes:
  - name: <node name>
    type: grokstream_aiops_output
    endpoint: <endpoint>
    payload: |
      {
        "title": "{{ .item.signal.title }}",
        "description": "{{ .item.signal.description }}",
        "value": {{ .item.signal.value }}
      }      

Optional Parameters

suppression_window

Suppression window for notifications. When set, duplicate alerts for the same signal are suppressed for the specified duration.

nodes:
  - name: <node name>
    type: grokstream_aiops_output
    endpoint: <endpoint>
    suppression_window: 10m
    payload: |
      <payload template>      

headers

Additional HTTP headers to include with each request to the Grokstream AIOps endpoint.

nodes:
  - name: <node name>
    type: grokstream_aiops_output
    endpoint: <endpoint>
    headers:
      - header: Authorization
        value: "Bearer ${GROKSTREAM_API_TOKEN}"
      - header: X-Custom-Header
        value: "custom-value"
    payload: |
      <payload template>