ANOMALY WEBHOOK

Anomaly Payload

Name	Type	Description
`event_type`	string	Always: “zebrium_anomaly”
`customer_name`	string	Customer name of Zebrium instance
`deployment_name`	string	Name of the deployment where anomaly was raised
`incident_group`	string	Name of the incident group where anomaly was raised
`anomalous_events`	`event object` list	Anomalous events that are not part of an incident

Event Object

Name	Type	Description
`event_uuid`	uuid	Unique identifier for the event
`etype`	string	Name of the event type
`ze_xid`	uuid	Unique external identifier for the event if provided by the log collector (otherwise empty)
`incident_group`	string	Name of the incident group where anomaly was raised
`event_text`	string	Log event text
`host`	string	Host on which event originated
`log_name`	string	Name of log basename (e.g. syslog, error)
`severity`	string	Severity text as see in the log (e.g. INFO)
`severity_num`	integer	Severity number as defined by syslog
`app`	string	Application name from meta data
`container_name`	string	Container name from meta data
`namespace_name`	string	Namespace name from meta data
`epoch`	integer	UTC epoch of event
`epoch_ts`	timestamp (yyyy-mm-ddThh:mm:ss.nnnnnnZ)	UTC timestamp of event
`local_timestamp`	timestamp (yyyy-mm-ddThh:mm:ss.nnnnnn)	Local timestamp of event
`local_offset`	string	Local time offset from UTC as depicted in the log event
`event_meta_data`	set of name value pairs	Name value pairs derived from event meta data

Example Payload

{
  "event_type": "zebrium_anomaly",
  "customer_name": "acme",
  "deployment_name": "mydeployment",
  "incident_group": "prod",
  "anomalous_events": [
    {
      "event_uuid": "0005edb2-2a5d-65b0-0200-007000013af2",
      "ze_xid": "18fd765a43de2",
      "incident_group": "prod",
      "event_text": "2020-06-06 04:59:17,878 INFO  [spring-startup]  c.a.u.c.l.PluginSettingsAuditLogService Thu Jun 25 04:59:17 PDT 2019 Bitbucket: Successfully started the Universal Plugin Manager",
      "host": "host005",
      "log_name": "bitbkt",
      "severity": "Informational",
      "severity_num": 6,
      "app": null,
      "container_name": null,
      "namespace_name": "default",
      "epoch": 1591419557878,
      "epoch_ts": "2020-06-06T04:59:17.878000Z",
      "local_timestamp": "2020-06-06T04:59:17.878000",
      "local_utcoffset": "+0000",
      "event_meta_data": {
          "host": "host005",
          "pod_name": "bitbucket_master_76de32ac-86d3"
      }
    },
    {
      "event_uuid": "0005edb2-2a5d-65b0-0200-007000013af6",
      "ze_xid": "98fe32acb4ff65",
      "incident_group": "prod",
      "event_text": "2020-06-06 04:59:17,878 INFO  [spring-startup]  c.a.p.c.p.l.ConnectPluginEnabledHandler Got the last lifecycle event... Time to get started!",
      "host": "host005",
      "log_name": "bitbkt",
      "severity": "Informational",
      "severity_num": 6,
      "app": null,
      "container_name": null,
      "namespace_name": "default",
      "epoch": 1591419557878,
      "epoch_ts": "2020-06-06T04:59:17.878000Z",
      "local_timestamp": "2020-06-06T04:59:17.878000",
      "local_utcoffset": "+0000",
      "event_meta_data": {
          "host": "host005",
          "pod_name": "bitbucket_master_76de32ac-86d3"
      }
    },
    {
      "event_uuid": "0005edb2-2a5d-7550-0200-007000013af9",
      "ze_xid": "87df34ad2315de1",
      "incident_group": "prod",
      "event_text": "2020-06-06 04:59:17,882 DEBUG [spring-startup]  c.a.b.i.m.u.DefaultMirrorService Validating that all configured mirror servers are still installed",
      "host": "host005",
      "log_name": "bitbkt",
      "severity": "Debug",
      "severity_num": 7,
      "app": null,
      "container_name": null,
      "namespace_name": "default",
      "epoch": 1591419557882,
      "epoch_ts": "2020-06-06T04:59:17.882000Z",
      "local_timestamp": "2020-06-06T04:59:17.882000",
      "local_utcoffset": "+0000",
      "event_meta_data": {
          "host": "host005",
          "pod_name": "bitbucket_master_76de32ac-86d3"
      }
    }
  ]
}