Edwin AI Solarwinds Integration

Use the LogicMonitor Edwin AI Solarwinds Integration to receive alert events in Edwin AI from your Solarwinds environment. This integration provides automated response, alert enrichment, and cross-platform incident correlation in real time using custom webhooks.

This integration supports structured JSON payloads using the Edwin Common Event Format (CEF) to enrich event data with test metrics, rule metadata, and more.

Requirements for Configuring Edwin AI Solarwinds Integration

To configure the Edwin AI Solarwinds Integration, you need the following:

• Access to the Alerts and Activities page in your Solarwinds account
• An Edwin AI Client ID and Client Secret. For more information, see Edwin AI API Credentials Management.

Configuring the Edwin AI Solarwinds Integration Webhook

1. Configure a webhook alert in Solarwinds. For more information, see Create an alert definition from Solarwinds.
2. Include the following details to configure a trigger action in the Task section of the alert creation process:
   1. Select “Send Get or Post request to a web server” from the Add Action dropdown menu.
   2. Add a Name
   3. In the URL field, enter https://<accountname>.dexda.ai/integration/event/v1 
   4. Select Use HTTP/S POST
   5. Include your custom payload template in the Body to POST field (see Custom SolarWinds Payload Template Example.)
   6. In the Authentication section, include the following:
      • Select Basic
      • User Name—Edwin API client ID
      • Password—Edwin API client secret

Custom SolarWinds Payload Template Example

A Custom Payload Template is required when creating a webhook alert in Solarwinds for Edwin AI to use.

The following payload example dynamically maps Solarwinds alert data to the Edwin AI CEF structure:

[
  {
    "cef": {
      "eventCi": "${N=Alerting;M=AlertName}",
      "eventObject": "${N=Alerting;M=AlertMessage}",
      "eventSource": "Solarwinds",
      "eventName": "${N=Alerting;M=AlertName}",
      "eventDescription": "${N=Alerting;M=AlertDescription}",
      "eventSeverity": 1,
      "eventTime": "${N=Generic;M=S}.12345Z",
      "eventDetails": "${N=SWQL;M=SELECT TOP 1 RelatedNodeCaption FROM Orion.AlertObjects WHERE AlertObjectID = ${N=Alerting;M=AlertObjectID}}",
      "sourceRecord": {
      },
      "class": "event",
      "version": "1.1",
      "eventDomain": "",
     "eventCiLink": "${N=Alerting;M=AlertDetailsUrl}",
      "eventNameLink": "http://example.com/event/test-event",
      "eventSourceId": "123456",
    "eventSourceIdLink": "${N=Alerting;M=AlertDetailsUrl}"
    },
    "enrichments": {
    }
  }
]

For more information, see Event Records.