Hi,
I am writing a content pack. I am facing following issues. Can anyone help me how to solve them or provide link to documentation to write the content pack.
#1 I would like to render different colors for the different severity events like errors in red color bar in graph. How to provide this in JSON file.
#2 By default alerts are in disable mode, I would like to know the JSON parameter to make the alert enable.
#3 How to provide the mail id for the alert in JSON file?
Murali
#1 I would like to render different colors for the different severity events like errors in red color bar in graph. How to provide this in JSON file.
This is not possible today. You cannot do this from charts in the web UI either. We are considering this for a future release.
#2 By default alerts are in disable mode, I would like to know the JSON parameter to make the alert enable.
This is not possible today. Content packs are meant to be generic so they can be applied to any Log Insight instance. Alerts can be configured with either an email address or via vCenter Operations. Both of these alert types would be specific to a particular environment. To enable an alert you need to specify either an email address or vCenter Operations information (again not possible from content pack)
#3 How to provide the mail id for the alert in JSON file?
Same as #2 - not possible.
#1 I would like to render different colors for the different severity events like errors in red color bar in graph. How to provide this in JSON file.
This is not possible today. You cannot do this from charts in the web UI either. We are considering this for a future release.
#2 By default alerts are in disable mode, I would like to know the JSON parameter to make the alert enable.
This is not possible today. Content packs are meant to be generic so they can be applied to any Log Insight instance. Alerts can be configured with either an email address or via vCenter Operations. Both of these alert types would be specific to a particular environment. To enable an alert you need to specify either an email address or vCenter Operations information (again not possible from content pack)
#3 How to provide the mail id for the alert in JSON file?
Same as #2 - not possible.
Thanks for the details
for #2 & #3, i am writing a content pack for one of the enterprise application. so customer can import this content pack, it creates my application specific dashboard and the alert for some of the events. i would like to enable the alerts by default once the content pack is import. But seems this is not possible, i can see them as disabled. Anyhow user can enable and e-mail from managed alerts option, however that is saving as separate new own alert. But always my content pack alert will be showing as disabled state. So at least is there any option to the user to update my content pack alert alone with the mails id and enable?
Alert queries are user specific so there is no way to enable a content pack alert. Again, the issue is that allowing for an alert to be enabled in a content pack means including user specific information (e.g. email or vCenter Operations). Content packs are meant to be generic so they can be installed in any environment. In any case, I understand the request so thanks for the clarification. I will open an enhancement request for consideration in a future release.
Thank you
Hey mkantipudi, can you please mark this post as answered (you can even select your initial post and mark it answered from there).
done
