Set up alert notifications in channels

Set up notifications for new Health Log Analytics anomaly alerts in either a Slack or Microsoft Teams channel.

Before you begin

Starting with Version 33.0.27 - August 2024, Health Log Analytics uses the Microsoft Teams Graph spoke application to send notifications for new anomaly alerts. The new application replaces the Microsoft Teams spoke plugin, which will be deprecated. If you're using an HLA version earlier than 33.0.27, follow the setup procedure below. Otherwise, refer to Set up alert notifications in a Microsoft Teams channel.

Note:

If you upgrade from an earlier version to Version 33.0.27 - August 2024 or later, redo the setup using the procedure in Set up alert notifications in a Microsoft Teams channel.

For alert notifications in Slack channels, verify that the plugin Slack Webhooks Spoke for ServiceNow Integration Hub (com.sn.slack.ah) is installed:

1. Navigate to All > System Applications > All Available Applications > All.
2. Find the plugin using the filter criteria and search bar.

   You can search for the plugin by its name or ID. If you cannot find a plugin, you might have to request it from ServiceNow personnel. For more information, see Request a plugin.

Role required: evt_mgmt_operator or evt_mgmt_admin

Procedure

1. Create a Webhook URL for a channel in Slack or Microsoft Teams.

   Health Log Analytics uses the Webhook to notify about the alerts in the channel.

   Perform the appropriate procedure:

   • Create a Webhook URL for a channel in Slack
   • Create a Webhook URL for a channel in Microsoft Teams
2. Map the Webhook URL for the channel to the service instance associated with the alert.
   1. Navigate to Health Log Analytics Administration > Webhook Notification.
   2. Select New.
   3. On the form, fill in the fields.

      Table 1. Alert Notification Webhook form

      Field	Description
      Webhook	The Webhook URL that you created for the channel.
      Active	Select to activate the Webhook.
      Configuration item	The service instance associated with the alert. If this field is empty, the system uses the default property for the channel: default.slack.webhook.url for Slack or default.teams.webhook.url for Microsoft Teams.

   4. Select Submit.
3. Activate the Health Log Analytics Alert Management rule for submitting alerts to the appropriate channel.
   1. Navigate to Event Management > Rules > Alert Management Rules.
   2. Locate the appropriate rule:
      • For Slack: Submit HLA alerts to slack.
      • For Microsoft Teams: Submit HLA alerts to teams.
   3. In the Active column for the rule, set the value to true.
4. Optional: Filter the alerts on which notifications will be sent to the channel.
   1. In the Alert Management Rules table, select the rule for your channel.
   2. Select Alert Filter.
   3. On the form, set the conditions that must be met for sending a notification on the alert to the channel.
   4. Select Update.