Link

ANOMALY WEBHOOK

Anomaly Payload

Name Type Description
event_type string Always: “zebrium_anomaly”
customer_name string Customer name of Zebrium instance
deployment_name string Name of the deployment where anomaly was raised
incident_group string Name of the incident group where anomaly was raised
anomalous_events event object list Anomalous events that are not part of an incident

Event Object

Name Type Description
event_uuid uuid Unique identifier for the event
ze_xid uuid Unique external identifier for the event if provided by the log collector (otherwise empty)
incident_group string Name of the incident group where anomaly was raised
event_text string Log event text
host string Host on which event originated
log_name string Name of log basename (e.g. syslog, error)
severity string Severity text as see in the log (e.g. INFO)
severity_num integer Severity number as defined by syslog
app string Application name from meta data
container_name string Container name from meta data
namespace_name string Namespace name from meta data
epoch integer UTC epoch of event
epoch_ts timestamp (yyyy-mm-ddThh:mm:ss.nnnnnnZ) UTC timestamp of event
local_timestamp timestamp (yyyy-mm-ddThh:mm:ss.nnnnnn) Local timestamp of event
local_offset string Local time offset from UTC as depicted in the log event
event_meta_data set of name value pairs Name value pairs derived from event meta data

Example Payload

{
  "event_type": "zebrium_anomaly",
  "customer_name": "acme",
  "deployment_name": "mydeployment",
  "incident_group": "prod",
  "anomalous_events": [
    {
      "event_uuid": "0005edb2-2a5d-65b0-0200-007000013af2",
      "ze_xid": "18fd765a43de2",
      "incident_group": "prod",
      "event_text": "2020-06-06 04:59:17,878 INFO  [spring-startup]  c.a.u.c.l.PluginSettingsAuditLogService Thu Jun 25 04:59:17 PDT 2019 Bitbucket: Successfully started the Universal Plugin Manager",
      "host": "host005",
      "log_name": "bitbkt",
      "severity": "Informational",
      "severity_num": 6,
      "app": null,
      "container_name": null,
      "namespace_name": "default",
      "epoch": 1591419557878,
      "epoch_ts": "2020-06-06T04:59:17.878000Z",
      "local_timestamp": "2020-06-06T04:59:17.878000",
      "local_utcoffset": "+0000",
      "event_meta_data": {
          "host": "host005",
          "pod_name": "bitbucket_master_76de32ac-86d3"
      }
    },
    {
      "event_uuid": "0005edb2-2a5d-65b0-0200-007000013af6",
      "ze_xid": "98fe32acb4ff65",
      "incident_group": "prod",
      "event_text": "2020-06-06 04:59:17,878 INFO  [spring-startup]  c.a.p.c.p.l.ConnectPluginEnabledHandler Got the last lifecycle event... Time to get started!",
      "host": "host005",
      "log_name": "bitbkt",
      "severity": "Informational",
      "severity_num": 6,
      "app": null,
      "container_name": null,
      "namespace_name": "default",
      "epoch": 1591419557878,
      "epoch_ts": "2020-06-06T04:59:17.878000Z",
      "local_timestamp": "2020-06-06T04:59:17.878000",
      "local_utcoffset": "+0000",
      "event_meta_data": {
          "host": "host005",
          "pod_name": "bitbucket_master_76de32ac-86d3"
      }
    },
    {
      "event_uuid": "0005edb2-2a5d-7550-0200-007000013af9",
      "ze_xid": "87df34ad2315de1",
      "incident_group": "prod",
      "event_text": "2020-06-06 04:59:17,882 DEBUG [spring-startup]  c.a.b.i.m.u.DefaultMirrorService Validating that all configured mirror servers are still installed",
      "host": "host005",
      "log_name": "bitbkt",
      "severity": "Debug",
      "severity_num": 7,
      "app": null,
      "container_name": null,
      "namespace_name": "default",
      "epoch": 1591419557882,
      "epoch_ts": "2020-06-06T04:59:17.882000Z",
      "local_timestamp": "2020-06-06T04:59:17.882000",
      "local_utcoffset": "+0000",
      "event_meta_data": {
          "host": "host005",
          "pod_name": "bitbucket_master_76de32ac-86d3"
      }
    }
  ]
}