I have an integration where some events sent from DataDog to PagerDuty are being sent as severity “error” when in reality they are just “warning”. (This is due to not being able to set a warning threshold only on the DataDog side.) Within PagerDuty I would like to reset the severity to warning using event rules. Looking at the docs, I should be able to update any CEF field, but severity isn’t in the drop down. https://support.pagerduty.com/docs/rulesets#dynamic-field-enrichment--extraction
Can this be accomplished?
Hi Kieran. You should be able to do this in Event Orchestration, which will replace the event rules this year. The current EOL for event rules is April 30, 2023.
More on event orchestration: https://support.pagerduty.com/docs/migrate-to-event-orchestration
You’ll have the ability to create rules to change the alert behavior and the alert data, and the toolset is more robust than the tools for event rules.
You can choose to ignore/auto resolve the warning message, change their data, or take other actions.
EO is quite a bit different from Event Rules, so there’s also a free, self-paced module on PDU for it. https://university.pagerduty.com/event-orchestration
Reply
Login to PagerDuty Commons
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.