VictorOps (Splunk On-Call) alert channel

Configure FortiCNAPP to forward alerts to specific VictorOps groups using a VictorOps REST endpoint.

Creating a REST Endpoint

To create a REST endpoint:

1. In VictorOps, navigate to Integrations > 3rd Party Integrations > REST – Generic.
2. If the REST endpoint integration is not enabled, click Enable to generate your endpoint destination URL.

3. (Optional) Customize escalation policies. See Set up an escalation policy in the Splunk documentation for more details.

Before providing the URL to FortiCNAPP, you must replace everything after the final forward slash with the routing key that you want to use for the integration. Alert routing gives you the ability to assign specific types of alerts to specific groups. The final URL must use this form:

https://alert.victorops.com/integrations/...../[routing_key]

For details about creating REST endpoints, see VictorOps: REST Endpoint and VictorOps Routing Keys.

Creating a FortiCNAPP VictorOps alert channel using Terraform

For organizations using Terraform to manage their environments, FortiCNAPP maintains the Terraform provider, which enables configuration of alert channels using automation.

For a complete list of custom Terraform resources to manage alert channels in FortiCNAPP, see Manage alert channels with Terraform.

# Configure Victor Ops Alert Channel in Lacework
resource "lacework_alert_channel_victorops" "example" {
  name        = "Victor Ops example"
  webhook_url = "https://alert.victorops.com/integrations/generic/20131114/alert/31e945ee-5cad-44e7-afb0-97c20ea80dd8/database"
}

Additional information on the lacework_alert_channel_victorops resource can be found on the Terraform Registry.