Use Case

This integration allows collecting events from SolarWinds to create events in OBM. The template name is SolarWinds events to OBM events (OA).

Requirements

Integration Requirements


SolarWinds

Operations Agent

Authentication

  • Username and Password

  • N/A

Permissions

  • Basic Privileges

  • N/A

Environment

  • N/A

Network Requirements


Direction (Port)

Communication

  • ZigiOps → SolarWinds (17778)

  • ZigiOps → Operations Agent (30005)

Actions

Get Events

This action sends HTTP requests at a scheduled interval to collect events from SolarWinds to create events in OBM.

Data Mapping

Below is the default data mapping for this integration template.

Source Entity

Target Entity Attribute

Target Entity Attribute Details

Events

Category

SolarWinds

(a static value that the integration sends for the "Category" attribute of the OBM event)

Close Key

The Integration Hub checks the available values in the following order:

  1. {netobjecttypetrim}:{netobjectid}:Red
    (combination of the "Net Object Type" and the "Net Object ID" of the SolarWinds event and the static value "Red" if the "Icon" is one of "Start, Green, Testing" and the "Event Type" is one of "22, 6303, 52, 11, 6300, 5, 1100, 504, 506")

  2. {netobjecttypetrim}:{netobjectid}:Unmanage
    (combination of the "Net Object Type" and the "Net Object ID" of the SolarWinds event and the static value "Unmanage" if the "Icon" is one of "Start, Green, Testing" and the "Event Type" is one of "511, 512, 140, 141, 40, 41")

  3. {netobjecttypetrim}:{netobjectid}:Critical
    (combination of the "Net Object Type" and the "Net Object ID" of the SolarWinds event and the static value "Critical" if the "Icon" is one of "Start, Green, Testing" and the "Event Type" is one of "26, 150, 1500, 500, 600, 700, 20")

  4. {netobjecttypetrim}:{netobjectid}:RedAlert
    (combination of the "Net Object Type" and the "Net Object ID" of the SolarWinds event and the static value "RedAlert" if the "Icon" is one of "Start, Green, Testing" and the "Event Type" is "31")

  5. {netobjecttypetrim}:{netobjectid}:RedYield
    (combination of the "Net Object Type" and the "Net Object ID" of the SolarWinds event and the static value "Red" if the "Icon" is one of "Start, Green, Testing" and the "Event Type" is one of "24, 5001")

  6. {netobjecttypetrim}:{netobjectid}
    (combination of the "Net Object Type" and the "Net Object ID" of the SolarWinds event if the "Icon" is not one of "Start, Green, Testing")

Correlation Key

The Integration Hub checks the available values in the following order:

  1. {netobjecttypetrim}:{netobjectid}:{eventtype}:Normal
    (combination of the "Net Object Type", "Net Object ID", "Event Type" and the static value "Normal" if the "Icon" of the SolarWinds event is one of "Start, Green, Testing")

  2. {netobjecttypetrim}:{netobjectid}:{eventtype}:Minor
    (combination of the "Net Object Type", "Net Object ID", "Event Type" and the static value "Minor" if the "Icon" of the SolarWinds event is one of "Shutdown, Unplugged")

  3. {netobjecttypetrim}:{netobjectid}:{eventtype}:Critical
    (combination of the "Net Object Type", "Net Object ID", "Event Type" and the static value "Critical" if the "Icon" of the SolarWinds event is one of "Critical, RedAlert, Red")

  4. {netobjecttypetrim}:{netobjectid}:{eventtype}:Major
    (combination of the "Net Object Type", "Net Object ID", "Event Type" and the static value "Major" if the "Icon" of the SolarWinds event is one of "RedYield, Unreachable")

  5. {netobjecttypetrim}:{netobjectid}:{eventtype}:Warning
    (combination of the "Net Object Type", "Net Object ID", "Event Type" and the static value "Warning" if the "Icon" of the SolarWinds event is one of "Unmanage, Warn, External, Disabled")

Description

{eventtypeproperties/name}

(the "Name" of the event properties of the SolarWinds event)

ETI

The Integration Hub checks the available values in the following order:

  1. NodeStatus:Down
    (a static value that the Integration Hub sends if the "Net Object Type" of the SolarWinds event is "N" and the "Icon" of the SolarWinds event is "Red")

  2. NodeStatus:Up
    (a static value that the Integration Hub sends if the "Net Object Type" of the SolarWinds event is "N" and the "Icon" of the SolarWinds event is one of "Add, Green")

  3. InterfaceCommunicationStatus:Unavailable
    (a static value that the Integration Hub sends if the "Net Object Type" of the SolarWinds event is one of "I, IW" and the "Icon" of the SolarWinds event is one of "Red, RedYield")

  4. InterfaceCommunicationStatus:Available
    (a static value that the Integration Hub sends if the "Net Object Type" of the SolarWinds event is one of "I, IW" and the "Icon" of the SolarWinds event is "Green")

Related CI

The Integration Hub checks the available values in the following order:

  1. {extracthostdns}
    (the "DNS" of the affected host if the "DNS" of the affected entity is available)

  2. {extracthostsysname}
    (the "Sys Name" of the affected host if the "Sys Name" of the affected entity is available)

  3. {extracthostnodename}
    (the "Node Name" of the affected host if the "Node Name" of the affected entity is available)

Severity

The Integration Hub checks the available values in the following order:

  1. Warning
    (the value that the Integration Hub sends if the "Icon" of the SolarWinds event is one of "Unmanage, Warn, External, Disabled")

  2. Major
    (the value that the Integration Hub sends if the "Icon" of the SolarWinds event is one of "RedYield, Unreachable")

  3. Critical
    (the value that the Integration Hub sends if the "Icon" of the SolarWinds event is one of "Critical, RedAlert, Red")

  4. Minor
    (the value that the Integration Hub sends if the "Icon" of the SolarWinds event is one of "Shutdown, Unplugged")

  5. Normal
    (the value that the Integration Hub sends if the "Icon" of the SolarWinds event is one of "Start, Green, Testing")

Source CI

{z_self/hostname}

(the hostname of the Integration Hub server)

Subcategory

Event

(a static value that the Integration Hub sends for the "Subcategory" field of the OBM event)

Timestamp

{eventtime}

(the time when the event has been created in SolarWinds)

Title

{message}

(the "Message" of the SolarWinds event)