UIM MS Teams alarm integration via webhook

[Guillermo Salgado]

Hello to all,

Does anyone has integrated UIM with MS Teams to post an alarm on a ms teams group?

I'm using UIM 23.4 CU2 

Regards,

Guillermo

[Stephen Danseglio]

Please refer to:

https://knowledge.broadcom.com/external/article/246965/send-uim-alarm-to-microsoft-teams-chat.html

------------------------------
Steve Danseglio
Technical Support Engineer 4 | IMS Division
UIM Certified Expert
KCSv6 Practices Certified
Certified Customer Success Manager (CCSM) Level 1
------------------------------

[Guillermo Salgado]

Hello Steve! 

Thanks a lot...I'm working with this paper right know :-) 

It's not exactly UIM specific, but I'll try to get it working and if it does, I'll post the result for everyone.

I´m go back soon with the results...

Regards,

Guillermo

[Guillermo Salgado]

Steve, Have you or anyone else tried this and found it to work?

I follow all procedures but I have a doubt about the payload value and their format.

Regards,

Guillermo

[Stephen Danseglio]

Yes. I'm not back in the office until December 2 and I can check then or you could open a case and somebody will check for you.

------------------------------
Steve Danseglio
Technical Support Engineer 4 | IMS Division
UIM Certified Expert
KCSv6 Practices Certified
Certified Customer Success Manager (CCSM) Level 1
------------------------------

[Guillermo Salgado]

Sure, I just opened it.

Thanks Steve.

Regards,

Guillermo

[Sam Green]

Hi Guillermo, 

I'm keen to see how you get this working.

We've achieved "UIM - Teams Group Chat" by using Power Automate as a middle man.

It would be great to get it direct.

[Guillermo Salgado]

Hello Sam!

WOW! Nice! How did you get it?

[Trevor Niehaus]

Hi Sam and Guillermo,

We use NAS Auto Operator, Command, the command line string then allows us to pass custom (different Webhook URI's) with the required NAS variables like "$nimid" "$hostname" "$source" "$message" "$level".

The backend command script was written in PowerShell, we use the same method for OpsGenie and Slack.

Attachment(s)

NAStoTEAMS.zip   35 KB 1 version

[Guillermo Salgado]

Nice Trevor! Let me try it :-)

[Sam Green]

Thank you Trevor!

Great! 

I've set up the script in our UIM location and updated the script, I've also configured our Teams channel with Webhook.  Got our API and tested it with Postman.

I've updated the script with our Teams API and configured the AO rule.

I can see the AO rule firing when a matching alert is received, but the script isn't sending anything.

I'm thinking it may be a security restriction on our servers as the script is unsigned.  I'll look to getting it signed and I'll test it again.

Looks to be a great solution! Thank you for sharing.

[Sam Green]

Can this method also be used to post to Teams group chats? Or is it channels only?

[Guillermo Salgado]

Hi Trevor,

Unfortunately I can't activate the script at Auto-operator.

I simulate an alarm but the auto-operator doesn't run the script.

[Trevor Niehaus]

Guillermo,

It might be that the nas can't find powershell.exe, try using the full path to .exe

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

[Guillermo Salgado]

Unfortunately not, same issue...

this is de commnad:

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -executionpolicy remotesigned -File E:\UIM\script\NAStoTEAMS\NAStoTEAMS.ps1 https://webhook..... "$nimid" "$hostname" "$source" "$message" "$level"

At the Nas log, I cannot see any call to a command...

[Trevor Niehaus]

Guillermo,

The Webhook URI is from the Connectors?
Create an Incoming Webhook - Teams | Microsoft Learn

From a previous screenshot, the AO profile have "User Tag 1" defined, you do have robots with this tag creteria?

[Guillermo Salgado]

Hello Trevor,

No, I just repeat the configuration received. 

[Guillermo Salgado]

Hi thevor, 

I solve the powershell problem but I have other with the webhook invocation:

1) I can call the webhook but I don't receive any data from UIM in the invocation...  "api-version=2016-06-01&sp=%2Ftriggers%2Fmanual%2Frun&sv=1.0&sig=mTxLVaHeTbfDoCYzqBFeqHjkZZ6FWtKVc03taJ1NUWU ; hostname ;  ; source ;  ; message ;  ; UIM level " ... THIS is an extract from log

2) How you solve the credentials on office 365 to allow you to reach and publish using this webhook?

Regards,

Guillermo