Home > Storage > Data Storage Essentials > Storage Resource Manager (SRM) > Dell SRM: Automating Incident Management in ServiceNow > SRM alert definition with webhook action
The alert definition ServiceNow notification via WebHook contains filtered-entry and webhook-action components.
Figure 28. Alert definition with webhook action
The filtered entry component filters on alerts received by Mail Forwarder Adapter on the SRM PBE server, which is the listening socket for consolidated alerts. These alerts are written to the events database on the SRM PBE server and are candidates to be sent as notifications to external systems.
By default, all alerts are captured.
Figure 29. Webhook alert definition filtered-entry component
For the SRM Webhook HTTPS POST to the ServiceNow scripted REST API, URL and Secret are mandatory parameters. WebHook Content is the https post request body, which is a mandatory parameter.
The ServiceNow REST API URL example is https://dev78342.service-now.com/api/653807/srm_alerts.
Secret is an arbitrary string.
WebHook Content is the JSON payload with parameters that are automatically loaded from the alert properties.
alertId:PROP.'Name',
severity:PROP.'severity',
eventType:PROP.'eventtype',
timestamp:PROP.'OpenedAt',
systemName:PROP.'device',
systemType:PROP.'devtype',
componentType:PROP.'parttype',
componentName:PROP.'part',
source:PROP.'Source',
category:PROP.'category',
description:PROP.'fullmsg',
active:PROP.'active',
acknowledged:PROP.'acknowledged',
owner:PROP.'owner'
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<AlertingConfig xmlns="http://www.watch4net.com/Alerting">
<definition-list name="Examples/ServiceNow notification via Webhook" enabled="false" hidden="false" id="1563481087565022">
<description>Alert notification definition for sending webhook</description>
<entry-point-list>1563480754565796</entry-point-list>
</definition-list>
<entry-point-list id="1563480754565796">
<name>ServiceNow WebHook notification filter</name>
<class>com.watch4net.alerting.operation.FilteredEntryPoint</class>
<filter>adapterName=='Mail Forwarder Adapter'</filter>
<description>ServiceNow WebHook notification entry point</description>
<action-list from="output" to="entry">1563480754749057</action-list>
</entry-point-list>
<action-list id="1563480754749057">
<name>SRM webhook to ServiceNow</name>
<class>com.watch4net.alerting.action.WebHookAction</class>
<param-list name="WebHook Content">alertId:PROP.'Name',
severity:PROP.'severity',
eventType:PROP.'eventtype',
timestamp:PROP.'OpenedAt',
systemName:PROP.'device',
systemType:PROP.'devtype',
componentType:PROP.'parttype',
componentName:PROP.'part',
source:PROP.'Source',
category:PROP.'category',
description:PROP.'fullmsg',
active:PROP.'active',
acknowledged:PROP.'acknowledged',
owner:PROP.'owner'</param-list>
</action-list>
</AlertingConfig>
The alert definition ServiceNow notification via WebHook appears under the selected folder.
From the moment of alert-definition enablement, incidents are created, updated, closed, and reopened in ServiceNow based on SRM alerts.
Figure 31. Alert definition with webhook action in folder
Note: WebHook alert notification action is an available feature beginning with SRM 4.6. In that SRM version, the protocol supported for URL parameters is HTTP. If the ServiceNow REST API resource cannot be configured to listen to HTTP, but only to HTTPS, the alert definition ServiceNow notification via WebHook will not work. In such case, use the previous option, SRM alert definition via external process action, to integrate SRM alerts into ServiceNow.