> For the complete documentation index, see [llms.txt](https://support.incidents.cloud.solarwinds.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.incidents.cloud.solarwinds.com/integrations/alert-source-integrations-native/solarwinds_orion.md).

# SolarWinds Orion

Steps to configure SolarWinds Orion integration for incident management, using Squadcast

SolarWinds Orion is designed to help organizations eliminate tool sprawl, ensure availability, improve visibility, and reduce remediation time across the entire IT estate with AI-powered, full-stack observability for today’s complex IT environments.

Route detailed alerts from SolarWinds Orion to the right users in Squadcast.

### Using SolarWinds Orion as an Alert Source

1. Navigate to **Services** -> **Service Overview** -> select or search for your Service. Expand the accordion -> In the Alert Sources section, click **Add**.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-4fbd74e7ca0b30173c47a1d58ed6a0804a0465aa%2FAlert_Sources.png?alt=media\&token=aaca6610-9d18-4dd4-9cf5-320042f326f1)

2\. Select **SolarWinds** **Orion.** Copy the displayed **Webhook URL** to [configure](#create-a-squadcast-webhook-alert-in-solarwinds-orion) it within **SolarWinds.** Finish by clicking **Add Alert Source** -> **Done.**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-d49eace6d15f54dbe3c9456c59e39fac3f247d72%2FSolarwinds%20Orion.png?alt=media\&token=3519ae19-4772-4e72-b729-18889d61bc74)

{% hint style="warning" %}
**Important:**

When an alert source turns Active, it’ll show up under Configured Alert Sources, you can either generate a test alert from the integration or wait for a real-time alert to be generated by the Alert Source. An Alert Source is active if there is a recorded incident via that Alert Source for the Service.
{% endhint %}

### Create a Squadcast Webhook Alert in SolarWinds **Orion**

**(1)** Login to your SolarWinds dashboard. Head over to the **ALERTS & ACTIVITY** tab. Then select **Alerts**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-541febfc2df903522be81733edb8f06bf5dd4349%2Fsolarwinds_orion_2.png?alt=media\&token=b74416c3-50b0-4cef-ac52-c5524376ea90)

**(2)** Click on **Manage Alerts**, then under the **ALERT MANAGER** section, click on **ADD NEW ALERT**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-f8edc3d1ac5466ce6ec9bfa9d562b3be2331f065%2Fsolarwinds_orion_3.png?alt=media\&token=be6a502e-fd27-49bd-8fa4-fafda24c5932)

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-3f6ff75d79ee9b5f5d6ca42f4b020fc0ca9a2969%2Fsolarwinds_orion_4.png?alt=media)

**(3)** Under Alert Properties, set the **Name of alert definition** and the **Description of alert definition**. Toggle the **Enabled (On/Off)** switch to **ON** and click on **NEXT**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-b8c929a0a64f661e40d11f047c5fa0f57b10942e%2Fsolarwinds_orion_5.png?alt=media\&token=14ed1f74-797f-4de8-bc1d-c63b4c033808)

**(4)** Set the **Trigger Conditions** and **Reset Conditions** and click on **NEXT**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-0c94c8408683c2c7d8a4a0942024584130b9ab75%2Fsolarwinds_orion_6.png?alt=media\&token=e3fd2ce8-d59b-40cd-b884-c70edaac1979)

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-81f3756341824990d38c4fc40d898eccc35af79b%2Fsolarwinds_orion_7.png?alt=media\&token=c0dbdcf3-1a48-4998-a7ac-6666dfcd0bf7)

**(5)** Under **Trigger Actions**, click on **Add Action**. Then select **Send a GET or POST Request to a Web Server** and click on **CONFIGURE ACTION**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-52d3e2c0fa365424f4b31b0bc7e741c84d052755%2Fsolarwinds_orion_8.png?alt=media)

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-1f42bbc0cdd2a527b8314ab22af5545cbcc9100e%2Fsolarwinds_orion_9.png?alt=media\&token=67db79e5-e7d7-44e7-9049-ce9d10c9b0cf)

**(6)** Set the **name of action**. Paste the previously copied Squadcast Webhook URL in the placeholder for **URL**. Select **Use HTTP/S POST** and paste the variables mentioned below in the **Body to POST** box. Set **ContentType** as **application/x-www-form-urlencoded** and **None** under **Authentication**. Click on **ADD ACTION**, then on **NEXT**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-9be46616a6694cb607cd1ed8bad2f1077964defc%2Fsolarwinds_orion_10.png?alt=media)

```
EventID=${N=Alerting;M=AlertObjectID}-${N=Alerting;M=AlertID}&AcknowledgeLink=${N=Alerting;M=AcknowledgeLink}&AcknowledgeUrl=${N=Alerting;M=AcknowledgeUrl}&Acknowledged=${N=Alerting;M=Acknowledged}&AcknowledgedBy=${N=Alerting;M=AcknowledgedBy}&AcknowledgedTime=${N=Alerting;M=AcknowledgedTime;F=DateTime}&AlertActiveID=${N=Alerting;M=AlertActiveID}&AlertDefID=${N=Alerting;M=AlertDefID}&AlertDescription=${N=Alerting;M=AlertDescription}&AlertDetailsUrl=${N=Alerting;M=AlertDetailsUrl}&AlertID=${N=Alerting;M=AlertID}&TimeOfDay=${N=Alerting;M=TimeOfDay}&Severity=${N=Alerting;M=Severity}&ObjectType=${N=Alerting;M=ObjectType}&Notes=${N=Alerting;M=Notes}&LongAlertTriggerTime=${N=Alerting;M=LongAlertTriggerTime;F=DateTime}&LastEdit=${N=Alerting;M=LastEdit;F=DateTime}&DownTime=${N=Alerting;M=DownTime}&AlertTriggerTime=${N=Alerting;M=AlertTriggerTime;F=DateTime}&AlertTriggerCount=${N=Alerting;M=AlertTriggerCount}&AlertObjectID=${N=Alerting;M=AlertObjectID}&AlertName=${N=Alerting;M=AlertName}&AlertMessage=${N=Alerting;M=AlertMessage}&Status=Triggered
```

{% hint style="info" %}
**Note:**

**Custom User Defined Variables**

Users can define two custom variables under Trigger Actions. The two variables can be added in the format mentioned below :

**\&CustomVariable1Name=\[Name]\&CustomVariable1Value=\[Value]\&CustomVariable2Name=\[Name]\&CustomVariable2Value=\[Value]**

Replace the **\[Name]** & **\[Value]** with proper values and add at the end of the variables mentioned in **Step 6**. This is how it would look like :

```
EventID=${N=Alerting;M=AlertObjectID}-${N=Alerting;M=AlertID}&AcknowledgeLink=${N=Alerting;M=AcknowledgeLink}&AcknowledgeUrl=${N=Alerting;M=AcknowledgeUrl}&Acknowledged=${N=Alerting;M=Acknowledged}&AcknowledgedBy=${N=Alerting;M=AcknowledgedBy}&AcknowledgedTime=${N=Alerting;M=AcknowledgedTime;F=DateTime}&AlertActiveID=${N=Alerting;M=AlertActiveID}&AlertDefID=${N=Alerting;M=AlertDefID}&AlertDescription=${N=Alerting;M=AlertDescription}&AlertDetailsUrl=${N=Alerting;M=AlertDetailsUrl}&AlertID=${N=Alerting;M=AlertID}&TimeOfDay=${N=Alerting;M=TimeOfDay}&Severity=${N=Alerting;M=Severity}&ObjectType=${N=Alerting;M=ObjectType}&Notes=${N=Alerting;M=Notes}&LongAlertTriggerTime=${N=Alerting;M=LongAlertTriggerTime;F=DateTime}&LastEdit=${N=Alerting;M=LastEdit;F=DateTime}&DownTime=${N=Alerting;M=DownTime}&AlertTriggerTime=${N=Alerting;M=AlertTriggerTime;F=DateTime}&AlertTriggerCount=${N=Alerting;M=AlertTriggerCount}&AlertObjectID=${N=Alerting;M=AlertObjectID}&AlertName=${N=Alerting;M=AlertName}&AlertMessage=${N=Alerting;M=AlertMessage}&Status=Triggered&CustomVariable1Name=[Name]&CustomVariable1Value=[Value]&CustomVariable2Name=[Name]&CustomVariable2Value=[Value]
```

{% endhint %}

{% hint style="info" %}
**Note:**

**Custom User Defined Incident Message**

Users can define custom Incident Message under Trigger Actions. The variable can be added in the format mentioned below :

**\&CustomIncidentMessage=\[IncidentMessage]**

Replace the **\[IncidentMessage]** with proper values and add at the end of the variables mentioned in **Step 6**. This is how it would look like :

```
EventID=${N=Alerting;M=AlertObjectID}-${N=Alerting;M=AlertID}&AcknowledgeLink=${N=Alerting;M=AcknowledgeLink}&AcknowledgeUrl=${N=Alerting;M=AcknowledgeUrl}&Acknowledged=${N=Alerting;M=Acknowledged}&AcknowledgedBy=${N=Alerting;M=AcknowledgedBy}&AcknowledgedTime=${N=Alerting;M=AcknowledgedTime;F=DateTime}&AlertActiveID=${N=Alerting;M=AlertActiveID}&AlertDefID=${N=Alerting;M=AlertDefID}&AlertDescription=${N=Alerting;M=AlertDescription}&AlertDetailsUrl=${N=Alerting;M=AlertDetailsUrl}&AlertID=${N=Alerting;M=AlertID}&TimeOfDay=${N=Alerting;M=TimeOfDay}&Severity=${N=Alerting;M=Severity}&ObjectType=${N=Alerting;M=ObjectType}&Notes=${N=Alerting;M=Notes}&LongAlertTriggerTime=${N=Alerting;M=LongAlertTriggerTime;F=DateTime}&LastEdit=${N=Alerting;M=LastEdit;F=DateTime}&DownTime=${N=Alerting;M=DownTime}&AlertTriggerTime=${N=Alerting;M=AlertTriggerTime;F=DateTime}&AlertTriggerCount=${N=Alerting;M=AlertTriggerCount}&AlertObjectID=${N=Alerting;M=AlertObjectID}&AlertName=${N=Alerting;M=AlertName}&AlertMessage=${N=Alerting;M=AlertMessage}&Status=Triggered&CustomVariable1Name=[Name]&CustomVariable1Value=[Value]&CustomVariable2Name=[Name]&CustomVariable2Value=[Value]&CustomIncidentMessage=[IncidentMessage]
```

{% endhint %}

**(7)** Under **RESET ACTIONS**, click on **Add Action**. Then select **Send a GET or POST Request to a Web Server** and click on **CONFIGURE ACTION**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-b7b40a15ca5d15e5fcfd98f4c0917923b4cf108e%2Fsolarwinds_orion_11.png?alt=media)

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-a180a92cc238ccb811569ebc64dbca4e3fc547f1%2Fsolarwinds_orion_12.png?alt=media)

**(8)** Set the **name of action**. Paste the previously copied Squadcast Webhook URL in the placeholder for **URL**. Select **Use HTTP/S POST** and paste the variables mentioned below in the **Body to POST** box. Set **ContentType** as **application/x-www-form-urlencoded** and **None** under **Authentication**. Click on **ADD ACTION**, then on **NEXT**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-edb69cdebe4a6f974655f233855d2556045192ff%2Fsolarwinds_orion_13.png?alt=media)

```
EventID=${N=Alerting;M=AlertObjectID}-${N=Alerting;M=AlertID}&AcknowledgeLink=${N=Alerting;M=AcknowledgeLink}&AcknowledgeUrl=${N=Alerting;M=AcknowledgeUrl}&Acknowledged=${N=Alerting;M=Acknowledged}&AcknowledgedBy=${N=Alerting;M=AcknowledgedBy}&AcknowledgedTime=${N=Alerting;M=AcknowledgedTime;F=DateTime}&AlertActiveID=${N=Alerting;M=AlertActiveID}&AlertDefID=${N=Alerting;M=AlertDefID}&AlertDescription=${N=Alerting;M=AlertDescription}&AlertDetailsUrl=${N=Alerting;M=AlertDetailsUrl}&AlertID=${N=Alerting;M=AlertID}&TimeOfDay=${N=Alerting;M=TimeOfDay}&Severity=${N=Alerting;M=Severity}&ObjectType=${N=Alerting;M=ObjectType}&Notes=${N=Alerting;M=Notes}&LongAlertTriggerTime=${N=Alerting;M=LongAlertTriggerTime;F=DateTime}&LastEdit=${N=Alerting;M=LastEdit;F=DateTime}&DownTime=${N=Alerting;M=DownTime}&AlertTriggerTime=${N=Alerting;M=AlertTriggerTime;F=DateTime}&AlertTriggerCount=${N=Alerting;M=AlertTriggerCount}&AlertObjectID=${N=Alerting;M=AlertObjectID}&AlertName=${N=Alerting;M=AlertName}&AlertMessage=${N=Alerting;M=AlertMessage}&Status=Resolved
```

**(9)** Finalize the Alert Details on the **SUMMARY** page and click on **SUBMIT**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-4ea0258f5096ea0db43c3255149b3b6c0171e611%2Fsolarwinds_orion_14.png?alt=media)

That's it, you are good to go! Your SolarWinds Orion integration is now complete. Whenever SolarWinds fires an alert through **Trigger Actions**, an incident will be created in Squadcast for it. Also, when an alert has been **RESET** in SolarWinds Orion, the corresponding incident gets **auto-resolved** in Squadcast.

*Have any questions?* [*Ask the community*](https://community.squadcast.com/view/home)*.*
