Microsoft Teams

[Kurt Wolf 0]

We recently moved from Slack to Microsoft Teams.  I would like to get our alert integration working.  Does anyone have a writeup of doing this?

[Kerry DeVilbiss 0]

Hey @Kurt Wolf,

I'm actively working on documenting some internal efforts to get a Microsoft Teams webhook integration in place - I'll reach out within the next day or so with some instructions.

Best,

Kerry

[Nicklas Karlsson 1]

Great!! We're all in to Microsoft Teams, and this will be a great feature

[Kerry DeVilbiss 0]

I just sent out an email with some attached instructions for both of you - we're working on some more formal documentation, but I wanted to get it out there so you could use it!

Let me know how it goes - if others are interested, reply here and I can send over the same doc - and eventually I'll post a link to the official docs when they're ready.

Best,

Kerry

[Chris Swanger 0]

Kerry, if you still have the documentation for integrating teams alert notifications, I would love to try it. 

Thanks!

[fintanquinn 0]

Also Interested here 

 

Thanks 

[Nicklas Karlsson 1]

I would really like to take a look at the documentation... Can't figure it out to work for me. so if you guys have a solution I will be glad to get the help I can to solve this

[Gregb 0]

I would be interested to see what this documentation looks like.  We have the email to Teams integration configured.  If there is a different way to do this, it would be very interested. 

[Nicklas Karlsson 1]

Hi All!

I've tested this and it works. No reply options yet, but it's a start

Create a channel for webhooks in Teams copy that adress and use it in your Integration ( I copied a Slack integration)

And I've used the following JSON formatting

{
    "@type": "MessageCard",
    "@context": "http://schema.org/extensions",
    "themeColor": "ff0000",
    "title": "Company - LM Webhook Test",
    "text":"Alerts!",
    "sections": [{
        "activityTitle": "Action Required!",
        "activitySubtitle": "Here are the details",
        "Facts": [{
            "name": "Host:",
            "value": "##HOST##"
        }, {
            "name": "Datasource",
            "value": "##DATASOURCE##"
        }, {
            "name": "Displayname:",
            "value": "##system.displayname##"
        }, {
            "name": "InstanceGroup:",
            "value": "##INSTANCEGROUP##"
        }, {
            "name": "Datapoint:",
            "value": "##DATAPOINT##"
        }, {
            "name": "Datapoint Description:",
            "value": "##DPDESCRIPTION##"
        }, {
            "name": "Level:",
            "value": "##LEVEL##"
        }, {
            "name": "Start:",
            "value": "##START##"
        }, {
            "name": "Duration:",
            "value": "##DURATION##"
        }, {
            "name": "Value:",
            "value": "##VALUE##"
        }, {
            "name": "Threshold:",
            "value": "##THRESHOLD##"
        }, {
            "name": "ClearValue:",
            "value": "##CLEARVALUE##"
        }, {
            "name": "Reason:",
            "value": "##DATAPOINT## ##THRESHOLD##"
        }, {
            "name": "Group:",
            "value": "##GROUP##"
        }],
        "markdown": true
    }]
}

[Kerry DeVilbiss 0]

Hey Guys,

Give me a couple hours to see if I can't make our instructions publicly accessible today - I can see now there's plenty of demand and we've had another go at cleaning them up so I will see what I can't get posted.

Have a couple meetings this morning but can follow up a bit later. Appreciate the patience ... !

Best,

Kerry

[Kerry DeVilbiss 0]

Issue

Microsoft Teams is Microsoft's offering in the collaboration tools/ group chat space. Much like Slack or other similar tools, they provide an API interface for posting alerts to a Microsoft Teams channel.

Resolution

Screenshots of some of these steps are available down below after the code blocks.

• - Add a new Custom Webhook Integration into LogicMonitor.
• - "Use different URLs or data formats to notify on various alert activity."
• - Insert the relevant payloads from the code sections below into each of the custom webhook stages.
• - Once you've setup the Integration, you'll need to get the webhook URLs from Microsoft Teams as follows:
  • -- Right-Click on the channel you want to be the destination for alerts, and select 'Connectors'
  • -- From the Connectors screen, select "Incoming Webhooks"
  • -- Configure a name for the incoming webhooks (LogicMonitor Alerts isn't a bad one)
  • -- At the end of this configuration, they'll provide you with a URL that looks something like this:
    • --- https://outlook.office.com/webhook/c23bf412-1ded-4d65-97c6-7187d4626894@b2770e96-450d-4a74-bf3b-f2b77eb337e9/IncomingWebhook/b99a46adc48745e19b9a3535f0be462a/48eb6267-4d62-4ebc-bc4a-33340fce7bcc
    • --- If you are setting up just one room in Teams - add the URL given by Teams to each of the webhook calls in LM.
  • -- If you want to send alerts to different rooms you can use a tokenized version of the URL instead of setting up a new integration for each room. Use the following steps to create the tokens, or you are setting up just 1 room skip to the next step.
    • --- https://outlook.office.com/webhook/##TEAMS.WEBHOOK##/IncomingWebhook/##TEAMS.INCOMINGWEBHOOK## (This will be the URL endpoint for each of the webhook calls in LM)
    • --- You are going to need to extract (2) pieces of information from the URL given by Teams:
    • --- The value in between /webhook/ and /IncomingWebhook - in this case, c23bf412-1ded-4d65-97c6-7187d4626894@a2770e96-450d-4a74-bf3b-f2c77eb337e9 - this will be set as device/group property 'teams.webhook'
    • --- The value of everything AFTER /IncomingWebhook - in this case, b99a36adc48745e19b9a3535f0be462a/48eb6267-4d62-4ebc-bc4a-33340fce7bcc - this will be set as device/group property 'teams.incomingwebhook'
    • --- Set those properties at the root of the LogicMonitor account (or wherever appropriate,) so that all the devices can pull that token into the alert delivery.
• That should be it! Setup an escalation chain with your Integration, and set up Alert Rules for your escalation chain.

Active Alerts:

{
    "@type": "MessageCard",
    "@context": "http://schema.org/extensions",
    "summary": "LogicMonitor Alert",
    "themeColor": "ff0000",
    "sections": [
        {
            "startGroup": true,
            "title": "LogicMonitor Automated Alert Notification",
            "activityImage": "http://www.logicmonitor.com/wp-content/uploads/2015/07/LM_Logo_Circle_Indigo_300px.png",
            "activityTitle": "Group: **##GROUP##**",
            "activitySubtitle": "##LEVEL## Alert received: ##ALERTID##",
            "text": "LogicMonitor Alert Details",
            "facts": [
                {
                    "name": "Group",
                    "value": "##GROUP##"
                },
                {
                    "name": "Host",
                    "value": "##HOST##"
                },
                {
                    "name": "Datasource",
                    "value": "##DATASOURCE##"
                },
                {
                    "name": "Datapoint",
                    "value": "##DATAPOINT##"
                },
                {
                    "name": "Threshold",
                    "value": "##THRESHOLD##"
                },
                {
                    "name": "Value",
                    "value": "##VALUE##"
                },
                {
                    "name": "Duration",
                    "value": "##DURATION##"
                },
                {
                    "name": "Start",
                    "value": "##START##"
                },
                {
                    "name": "Alert URL",
                    "value": "##AlertDetailURL##"
                },
                {
                    "name": "Service URL",
                    "value": "##URL##"
                },
                {
                    "name": "Website Description",
                    "value": "##WEBSITEDESCRIPTION##"
                },
                {
                    "name": "Website Checkpoint",
                    "value": "##CHECKPOINT##"
                },               
                {
                    "name": "Website Group",
                    "value": "##WEBSITEGROUP##"
                }
            ],
            "potentialAction": [
                {
                    "@type": "OpenUri",
                    "name": "Open Alert",
                    "targets": [
                        { "os": "default", "uri": "##AlertDetailURL##" }
                    ]
                }
            ]
        }
    ]
}

Escalated Alerts:

{
    "@type": "MessageCard",
    "@context": "http://schema.org/extensions",
    "summary": "LogicMonitor Alert",
    "themeColor": "ffcc00",
    "sections": [
        {
            "startGroup": true,
            "title": "LogicMonitor Alert Update Notification",
            "activityImage": "http://www.logicmonitor.com/wp-content/uploads/2015/07/LM_Logo_Circle_Indigo_300px.png",
            "activityTitle": "Group: **##GROUP##**",
            "activitySubtitle": "##LEVEL## Alert received: ##ALERTID##",
            "text": "LogicMonitor Alert Details",
            "facts": [
                {
                    "name": "Group",
                    "value": "##GROUP##"
                },
                {
                    "name": "Host",
                    "value": "##HOST##"
                },
                {
                    "name": "Datasource",
                    "value": "##DATASOURCE##"
                },
                {
                    "name": "Datapoint",
                    "value": "##DATAPOINT##"
                },
                {
                    "name": "Threshold",
                    "value": "##THRESHOLD##"
                },
                {
                    "name": "Value",
                    "value": "##VALUE##"
                },
                {
                    "name": "Duration",
                    "value": "##DURATION##"
                },
                {
                    "name": "Start",
                    "value": "##START##"
                },
                {
                    "name": "Alert URL",
                    "value": "##AlertDetailURL##"
                },
                {
                    "name": "Service URL",
                    "value": "##URL##"
                },
                {
                    "name": "Website Description",
                    "value": "##WEBSITEDESCRIPTION##"
                },
                {
                    "name": "Website Checkpoint",
                    "value": "##CHECKPOINT##"
                },               
                {
                    "name": "Website Group",
                    "value": "##WEBSITEGROUP##"
                }
            ],
            "potentialAction": [
                {
                    "@type": "OpenUri",
                    "name": "Open Alert",
                    "targets": [
                        { "os": "default", "uri": "##AlertDetailURL##" }
                    ]
                }
            ]
        }
    ]
}

Acknowledged Alerts:

{
    "@type": "MessageCard",
    "@context": "http://schema.org/extensions",
    "summary": "LogicMonitor Alert",
    "themeColor": "003366",
    "sections": [
        {
            "startGroup": true,
            "title": "LogicMonitor Acknowledgement Notification",
            "activityImage": "http://www.logicmonitor.com/wp-content/uploads/2015/07/LM_Logo_Circle_Indigo_300px.png",
            "activityTitle": "Group: **##GROUP##**",
            "activitySubtitle": "##LEVEL## Alert received: ##ALERTID##",
            "text": "LogicMonitor Alert Details",
            "facts": [
                {
                    "name": "Group",
                    "value": "##GROUP##"
                },
                {
                    "name": "Host",
                    "value": "##HOST##"
                },
                {
                    "name": "Datasource",
                    "value": "##DATASOURCE##"
                },
                {
                    "name": "Datapoint",
                    "value": "##DATAPOINT##"
                },
                {
                    "name": "Threshold",
                    "value": "##THRESHOLD##"
                },
                {
                    "name": "Value",
                    "value": "##VALUE##"
                },
                {
                    "name": "Duration",
                    "value": "##DURATION##"
                },
                {
                    "name": "Start",
                    "value": "##START##"
                },
                {
                    "name": "Alert URL",
                    "value": "##AlertDetailURL##"
                },
                {
                    "name": "Service URL",
                    "value": "##URL##"
                },
                {
                    "name": "Website Description",
                    "value": "##WEBSITEDESCRIPTION##"
                },
                {
                    "name": "Website Checkpoint",
                    "value": "##CHECKPOINT##"
                },               
                {
                    "name": "Website Group",
                    "value": "##WEBSITEGROUP##"
                }
            ],
            "potentialAction": [
                {
                    "@type": "OpenUri",
                    "name": "Open Alert",
                    "targets": [
                        { "os": "default", "uri": "##AlertDetailURL##" }
                    ]
                }
            ]
        }
    ]
}

Cleared Alerts:

{
    "@type": "MessageCard",
    "@context": "http://schema.org/extensions",
    "summary": "LogicMonitor Alert",
    "themeColor": "33f449",
    "sections": [
        {
            "startGroup": true,
            "title": "LogicMonitor Alert Clear Notification",
            "activityImage": "http://www.logicmonitor.com/wp-content/uploads/2015/07/LM_Logo_Circle_Indigo_300px.png",
            "activityTitle": "Group: **##GROUP##**",
            "activitySubtitle": "##LEVEL## Alert received: ##ALERTID##",
            "text": "LogicMonitor Alert Details",
            "facts": [
                {
                    "name": "Group",
                    "value": "##GROUP##"
                },
                {
                    "name": "Host",
                    "value": "##HOST##"
                },
                {
                    "name": "Datasource",
                    "value": "##DATASOURCE##"
                },
                {
                    "name": "Datapoint",
                    "value": "##DATAPOINT##"
                },
                {
                    "name": "Threshold",
                    "value": "##THRESHOLD##"
                },
                {
                    "name": "Value",
                    "value": "##VALUE##"
                },
                {
                    "name": "Duration",
                    "value": "##DURATION##"
                },
                {
                    "name": "Start",
                    "value": "##START##"
                },
                {
                    "name": "Alert URL",
                    "value": "##AlertDetailURL##"
                },
                {
                    "name": "Service URL",
                    "value": "##URL##"
                },
                {
                    "name": "Website Description",
                    "value": "##WEBSITEDESCRIPTION##"
                },
                {
                    "name": "Website Checkpoint",
                    "value": "##CHECKPOINT##"
                },               
                {
                    "name": "Website Group",
                    "value": "##WEBSITEGROUP##"
                }
            ],
            "potentialAction": [
                {
                    "@type": "OpenUri",
                    "name": "Open Alert",
                    "targets": [
                        { "os": "default", "uri": "##AlertDetailURL##" }
                    ]
                }
            ]
        }
    ]
}

 

Custom Webhook Overview

 

Teams Channel Connectors

 

Incoming Webhook Connector

Edited November 19, 2018 by Kerry DeVilbiss
formatting clarity

[iknowcoolin 0]

I appreciate the steps for MS teams webhook. 

I cannot see the pictures/screenshot.

[Herin 1]

Hi,

Interested to try this integration piece with our Microsoft Teams. I cannot see the pictures as well. Is there a possibility you can provide the information.

 

Thanks

[Adam Gent 5]

Are there any plans to add this as an official integration option?

[Kerry DeVilbiss 0]

For anyone else who might be interested, you can now download this integration from the following location:

https://github.com/kdevilbiss/Integrations/blob/master/Microsoft_Teams_v1.json

Cheers,

Kerry

[Cole McDonald 14]

Address doesn't seem to want to resolve.  Chunked it backwards as well and nothing resolves until github's main page.

[Cole McDonald 14]

I've added the JSON to our integration with teams.  Looks good, thank you.  The Facts sections seem to look great on my iPhone, but are very narrow under windows.  I'm going to see if there's a way to nudge them wider.

[Tom Merkel 0]

Hello. I see that this is an old topic, but could I ask for those screenshots, please? They are not loading. Thanks. 

[stockholm 0]

Hello, I'm trying to follow the instructions but looks like they are outdated. Does anyone have this working in their tenant, and willing to share how it's set up? We are in the trial phase with LM right now and one of the big selling points was that it had integrations with Microsoft Teams. It's a bit disappointing to find out there isn't an official integration (seems to be a bit of a disconnect with the sales team) but as long as I can get this working my boss and team will be happy. I asked support about it but since there isn't an officially supported method they pointed me to the community.

[stockholm 0]

Scratch that. I found and added the json file, and this is making a bit more sense. Only question I've got is, what permissions/licensing does the O365 account being used for the integration need?