In Flashduty
You can obtain an integration push URL through either of these two methods:
Using Private Integration
Choose this simpler option when you don’t need to route alert events to different channels.Using Shared Integration
Choose this option when you need to route alerts to different channels based on the alert event’s payload information.In Falcon
Configure webhooks for each alert rule.
- Log in to your Falcon console, select Templates to enter the alert rule template list page
- Open any alert rule template, fill in the callback address with the integration’s push URL
- Click the Save button to save the alert rule
- Repeat steps 2 and 3 for all alert rule templates that need to send events
Similarly, you can configure the same push URL for Expressions alert rules.- Return to the integration list, if the latest event time is displayed, the configuration is successful and events are being received
- Done
Status Mapping
Open-Falcon to Flashduty alert severity mapping:
| Open-Falcon | Flashduty | Status |
|---|---|---|
| 0 | Critical | Critical |
| 1 | Critical | Critical |
| 2 | Warning | Warning |
| 3 | Warning | Warning |
| 4 | Info | Info |
| 5 | Info | Info |
| 6 | Info | Info |