Link

INCIDENT WEBHOOK

Incident Payload

Name Type Description
event_type string Always: “zebrium_incident”
customer_name string Customer name of Zebrium instance
deployment_name string Name of the deployment where incident was raised
incident_group string Name of the incident group where incident was raised
incident_id uuid Unique identifier for the incident
incident_url url encoded string URL to view incident in the Zebrium UI
incident_like url encoded string API URL to "like" the incident
incident_mute url encoded string API URL to "mute" the incident
incident_spam url encoded string API URL to tag incident as "spam"
incident_epoch integer UTC epoch of incident start
incident_epoch_ts timestamp (yyyy-mm-ddThh:mm:ss.nnnnnnZ) UTC timestamp of incident start
incident_local_timestamp timestamp (yyyy-mm-ddThh:mm:ss.nnnnnn) Local time of incident start
incident_local_offset string Local time offset from UTC as depicted in the log event
incident_state string State of the incident (open, liked, muted, spam)
incident_hallmark_event event object Event determined to be the most severe indicator of the incident
incident_events event object list All other events that comprise the incident
incident_stats stat object list Correlated stats anomalies

Event Object

Name Type Description
event_uuid uuid Unique identifier for the event
ze_xid uuid Unique external identifier for the event if provided by the log collector (otherwise empty)
event_text string Log event text
host string Host on which event originated
log_name string Name of log basename (e.g. syslog, error)
severity string Severity text as see in the log (e.g. INFO)
severity_num integer Severity number as defined by syslog
app string Application name from meta data
container_name string Container name from meta data
namespace_name string Namespace name from meta data
incident_group string Name of the incident group where incident was raised
epoch integer UTC epoch of event
epoch_ts timestamp (yyyy-mm-ddThh:mm:ss.nnnnnnZ) UTC timestamp of event
local_timestamp timestamp (yyyy-mm-ddThh:mm:ss.nnnnnn) Local timestamp of event
local_offset string Local time offset from UTC as depicted in the log event
event_meta_data set of name value pairs Name value pairs derived from event meta data

Stat Object

Name Type Description
stat_reason string Anomalous feature summary (e.g. PEAK )
stat_name string Name of the stat
stat_ct integer Number of occurrences of this stat

Example Payload

{
  "event_type": "zebrium_incident",
  "customer_name": "Acme",
  "deployment_name": "mydeployment",
  "incident_group": "prod",
  "incident_id": "0005edb2-2a5d-65b0-0200-007000013af2",
  "incident_url": "https://portal03.zebrium.com/0/incidents/0005edb2-2a5d-65b0-0200-007000013af2",
  "incident_epoch": 1591419557878,
  "incident_epoch_ts": "2020-06-06T04:59:17.878000Z",
  "incident_local_timestamp": "2020-06-06T04:59:17.878000",
  "incident_local_utcoffset": "+0000",
  "incident_hallmark_event": {
    "event_uuid": "0005edb2-2a6a-f4b0-0200-007000013b46",
    "ze_uid": "123df45e6dcb56a",
    "event_text": "2020-06-06 04:59:18,718 WARN  [UpmScheduler:thread-1]  com.atlassian.upm.pac.PacClientImpl Update check request may take longer because of the number of add-ons",
    "host": "host005",
    "log_name": "bitbkt",
    "severity": "Warning",
    "severity_num": 4,
    "app": null,
    "container_name": null,
    "namespace_name": "default",
    "incident_group": "prod",
    "epoch": 1591419558718,
    "epoch_ts": "2020-06-06T04:59:18.718000Z",
    "local_timestamp": "2020-06-06T04:59:18.718000",
    "local_utcoffset": "+0000",
    "event_meta_data": {
        "host": "host005",
        "pod_name": "bitbucket_master_76de32ac-86d3"
    }
  },
  "incident_events": [
    {
      "event_uuid": "0005edb2-2a5d-65b0-0200-007000013af2",
      "ze_uid": "1267ad231d8df",
      "event_text": "2020-06-06 04:59:17,878 INFO  [spring-startup]  c.a.u.c.l.PluginSettingsAuditLogService Thu Jun 25 04:59:17 PDT 2019 Bitbucket: Successfully started the Universal Plugin Manager",
      "host": "host005",
      "log_name": "bitbkt",
      "severity": "Informational",
      "severity_num": 6,
      "app": null,
      "container_name": null,
      "namespace_name": "default",
      "incident_group": "prod",
      "epoch": 1591419557878,
      "epoch_ts": "2020-06-06T04:59:17.878000Z",
      "local_timestamp": "2020-06-06T04:59:17.878000",
      "local_utcoffset": "+0000",
      "event_meta_data": {
          "host": "host005",
          "pod_name": "bitbucket_master_76de32ac-86d3"
      }
    },
    {
      "event_uuid": "0005edb2-2a5d-65b0-0200-007000013af6",
      "ze_uid": "716def325f89",
      "event_text": "2020-06-06 04:59:17,878 INFO  [spring-startup]  c.a.p.c.p.l.ConnectPluginEnabledHandler Got the last lifecycle event... Time to get started!",
      "host": "host005",
      "log_name": "bitbkt",
      "severity": "Informational",
      "severity_num": 6,
      "app": null,
      "container_name": null,
      "namespace_name": "default",
      "incident_group": "prod",
      "epoch": 1591419557878,
      "epoch_ts": "2020-06-06T04:59:17.878000T",
      "local_timestamp": "2020-06-06T04:59:17.878000",
      "local_utcoffset": "+0000",
      "event_meta_data": {
          "host": "host005",
          "pod_name": "bitbucket_master_76de32ac-86d3"
      }
    },
    {
      "event_uuid": "0005edb2-2a5d-7550-0200-007000013af9",
      "ze_uid": "128fde6ab4f567",
      "event_text": "2020-06-06 04:59:17,882 DEBUG [spring-startup]  c.a.b.i.m.u.DefaultMirrorService Validating that all configured mirror servers are still installed",
      "host": "host005",
      "log_name": "bitbkt",
      "severity": "Debug",
      "severity_num": 7,
      "app": null,
      "container_name": null,
      "namespace_name": "default",
      "incident_group": "prod",
      "epoch": 1591419557882,
      "epoch_ts": "2020-06-06T04:59:17.882000Z",
      "local_timestamp": "2020-06-06T04:59:17.882000",
      "local_utcoffset": "+0000",
      "event_meta_data": {
          "host": "host005",
          "pod_name": "bitbucket_master_76de32ac-86d3"
      }
    }
  ],
  "incident_stats": [
    {
      "stat_reason": "PEAK",
      "stat_name": "system_cpu",
      "stat_ct": 12
    }
  ]
}