Edwin AI Slack Integration

Use the LogicMonitor Edwin Slack Integration to send notifications to your Slack environment from Edwin AI. Creating a workflow in Slack and configuring Edwin AI actions and rules provides automated response and cross-platform incident correlation in real time using a custom Slack workflow.

Requirements for Configuring Edwin AI Slack Integration

To configure the Edwin AI Slack Integration, you need the following:

• Permission to manage Edwin AI Integrations settings.
• A Slack workspace to receive alert notifications.
• Permission to create Slack workflows that accept webhooks.

Configuring the Edwin AI Slack Integration in Slack

1. Create a webhook workflow in Slack.
   For more information, see Build a workflow: Create a workflow that starts outside of Slack from Slack.
2. When setting up variables, include the following:
   • Description 
   • CI
   • Timestamp
   • Edwin_Link

3. Save the Web request URL from the completed workflow in a secure location for later use.

Slack can now receive notification details from Edwin AI.

Configuring Slack Integration Credentials

1. In LogicMonitor, navigate to Edwin AI and select Settings > Integrations.
2. Select Configure for HTTP Endpoint.
3. Enter a Name and Description for the Slack integration.
4. Enter the Slack Web request URL into the URL field.
5. Select Save.

Edwin AI includes Slack API credentials in outgoing payloads. You can verify and manage the integrations by selecting All Configured from the Integrations page.

Configuring a Slack Alert Action

1. Create a new Edwin AI Action.
   For more information, see Creating and Editing Action in Edwin AI.
2. In the Source dropdown menu, select “alerts.”
3. From the Add Action dropdown menu, select “Perform HTTP Request.”
4. Enter a Name and Description for the new action.
5. In the Mapped Fields section, do the following:
   1. From the Add Mapped Fields dropdown menu, select “HTTP Method.”
   2. From the Add Mapping dropdown menu, select “Value.”
   3. Enter “POST” in the value mapping field.
   4. From the Add Mapped Fields dropdown menu, select “Payload.”
   5. From the Add Mapping dropdown menu, select “multi variable.”
   6. In the Format field, add a JSON payload script to reflect the variables configured in your Slack workflow.
      For example, if you configured the default Edwin AI variables, use the following payload script: 
      {"Description":"%s","CI":"%s","Timestamp":"%s","Edwin_Link":"%s"}
   7. Select Add to configure payload enrichments.
      For example, the default Edwin AI variables use the following corresponding fields:
      • Description
      • CI
      • First Timestamp
      • Permanent URL

6. Select Submit.

Edwin AI now sends content from Mapped Fields to a Slack channel when the conditions are met.

Configure the conditions for this action in a new Edwin AI Rule. For more information, see Configuring a Slack Alert Rule.

Configuring a Slack Alert Rule

1. Create a new Edwin AI Rule.
   For more information, see Edwin AI Rules.
2. From the Add Interactive Action dropdown menu, select the action created to send Slack messages.
3. In the Filters section, configure the rule conditions to send a Slack message.
   For example, to send a message for any Edwin alert that is still open, do the following:
   1. Select Add Condition. 
   2. In the Field dropdown menu, select “Escalation.”
   3. In the Operator dropdown menu, Select “Not equals.”
   4. In the Value field, enter “closed.”

4. Select Submit.
5. To trigger the rule and action from an alert record, do the following:
   1. Navigate to Edwin AI > Explore.
   2. Find an alert record that has not been closed.
   3. On the Actions record, select the action you created.

The Slack channel receives the automated alert message any time you trigger the alert.