Atlassian Opsgenie

The integration described in this guide uses webhooks to allow BeyondTrust to automatically send detections and recommendations to Opsgenie, which eliminates manual intervention and delays in incident response, helping organizations improve their overall security postures.

⚠️

Important

Third-party documentation is subject to change. Updates might not be reflected in BeyondTrust documentation. For the most up-to-date information, visit Atlassian Opsgenie resources.

Requirements

Access to a tenant in Identity Security Insights, and an account with administrator privileges to create webhook integrations.

Administrative rights in Opsgenieto to create teams and add integrations.

ℹ️

Note

For more information, see Opsgenie support portal.

Configure Opsgenie

1. Create a team in Opsgenie and add members.

ℹ️

Note

For more information, see Opsgenie support portal.

2. Click on add integration and choose API from the available list of applications.
3. Enter the integration name, assign the team created in the step above, and click Continue.
4. Make a note of the API key as this will be used as an authentication parameter from Identity Security Insights.
5. Click Turn on integration. It is off by default.

ℹ️

Note

For more information, see Jira service management support.

Create a webhook integration for Opsgenie

1. In Identity Security Insights, select your tenant.
2. In the upper left menu, click Insights > Integrations.
   The Integrations page displays the available integrations.
3. Click Webhooks or your product.
   The Summary page displays.
4. Click Create Integration.
   The Configure Integration page displays.
5. To create the webhook, use the following:
   • Webhook Name: Enter a name
   • Webhook URL: https://api.opsgenie.com/v2/alerts
   • Authorization Type: Custom
   • Webhook Template: Use the following test webhook JSON template to test the connection and send a webhook to Opsgenie. After a successful test with the static test data, the template can be configured. Create or change the fields and add variables as per your requirements.

{
    "message": "%%definitionSummary%%",
    "description":"%%definitionSummary%%",
    "responders":[
        {"id":"73c952c1-d516-4e1b-8d52-653078fa2a55", "type":"team"},
        {"name":"TAP Integrations", "type":"team"},
        {"id":"f29959b2-c8b0-406f-b75f-0d7f53fe013d", "type":"user"}
    ],
    "tags": ["Outage","Critical"],
    "details":{
        "key1": "%%entityName%%",
      "key2": "%%entityType%%"
    },
    "priority": "P1",
    "impactedServices": [
      "2e7d4c68-2ddd-11e8-b467-0ed5f89f718b", 
      "df635094-efd3-48e4-b73a-b8bdfbf1178f"
    ]

}