Can I use group variables within the alert trigger/notification call to PagerDuty?

rrahn

I am trying to pull in the SolarWinds group for the node so I can have PageDuty filter on it.

I have tried different commands
${N=SWQL;M=SELECT cm.Container.Name AS [Group_Name]}
${N=OrionGroup;M=GroupMemberNameF=OriginalValue ${N=OrionGroup;M=GroupMemberName}
${GroupMemberName}
${GroupName}

Here is a working example, but I am trying to add more to it for the group name:
{
"payload": {
"summary": "${N=SwisEntity;M=Caption;F=OriginalValue} is ${N=SwisEntity;M=Status;F=Status}.",
"source": "${N=SwisEntity;M=Caption}",
"severity": "critical",
"component": "${N=SwisEntity;M=MachineType}",
"custom_details": {
"Node": " ${N=SwisEntity;M=Caption;F=OriginalValue}",
"Node Availability": "${N=SwisEntity;M=StatusDescription}",
}
},
"routing_key": "${SQL: SELECT Nodes.PDIntegrationKey FROM Nodes WHERE NodeID='${NodeID}'}",
"dedup_key": "${N=SwisEntity;M=Caption;F=OriginalValue}_${N=SwisEntity;M=Caption}_${N=SwisEntity;M=MachineType}",
"event_action": "trigger",
"client": "SolarWinds Orion",
"client_url": "${N=SwisEntity;M=DetailsUrl}"
}

When the alert is sent to pagerduty the API event looks like this with everything working but the group line.

<span class="token punctuation">{</span>  <span class="token property">"client"</span><span class="token operator">:</span> <span class="token string">"SolarWinds Orion"</span><span class="token punctuation">,</span>  <span class="token property">"client_url"</span><span class="token operator">:</span> <span class="token string">"Removed for posting on forums"</span><span class="token punctuation">,</span>  <span class="token property">"contexts"</span><span class="token operator">:</span> <span class="token null keyword">null</span><span class="token punctuation">,</span>  <span class="token property">"description"</span><span class="token operator">:</span> <span class="token string">"qw1scripts1001 is Down."</span><span class="token punctuation">,</span>  <span class="token property">"event_type"</span><span class="token operator">:</span> <span class="token string">"trigger"</span><span class="token punctuation">,</span>  <span class="token property">"incident_key"</span><span class="token operator">:</span> <span class="token string">"Removed for posting on forums"</span><span class="token punctuation">,</span>  <span class="token property">"service_key"</span><span class="token operator">:</span> <span class="token string">"Removed for posting on forums"</span><span class="token punctuation">,</span>  <span class="token property">"details"</span><span class="token operator">:</span> <span class="token punctuation">{</span>    <span class="token property">"Application Name"</span><span class="token operator">:</span> <span class="token string">"SolarWinds.Orion.Core.Common"</span><span class="token punctuation">,</span>    <span class="token property">"Description"</span><span class="token operator">:</span> <span class="token string">"Hardware: Intel64 Family 6 Model 63 Stepping 0 AT/AT COMPATIBLE - Software: Windows Version 10.0 (Build 14393 Multiprocessor Free)"</span><span class="token punctuation">,</span>    <span class="token property">"Group"</span><span class="token operator">:</span> <span class="token string">"${N=OrionGroup;M=GroupName}"</span><span class="token punctuation">,</span>    <span class="token property">"Group Name"</span><span class="token operator">:</span> <span class="token string">"${N=SWQL;M=SELECT cm.Container.Name}"</span><span class="token punctuation">,</span>    <span class="token property">"Node"</span><span class="token operator">:</span> <span class="token string">"Removed for posting on forums"</span><span class="token punctuation">,</span>    <span class="token property">"Node Availability"</span><span class="token operator">:</span> <span class="token string">"Node status is Down."</span>  <span class="token punctuation">}</span><span class="token punctuation">}</span>

Seashore

Is it that you want to display the Groups the node is a member of, when alerting that a node is down?
What if that node is a member of several groups?

To get the first group the node is a member of, try this:
${N=SWQL;M=SELECT CM.Container.DisplayName AS T FROM Orion.ContainerMembers AS CM WHERE CM.MemberUri LIKE '%=${N=SwisEntity;M=NodeID}'}