# SolarWinds Orion SolarWinds Orion is designed to help organizations eliminate tool sprawl, ensure availability, improve visibility, and reduce remediation time across the entire IT estate with AI-powered, full-stack observability for today’s complex IT environments. Route detailed alerts from SolarWinds Orion to the right users in Squadcast. ### Using SolarWinds Orion as an Alert Source 1. Navigate to **Services** -> **Service Overview** -> select or search for your Service. Expand the accordion -> In the Alert Sources section, click **Add**. ![](/files/ej4AI9zpOyFu5NZJCbwC) 2\. Select **SolarWinds** **Orion.** Copy the displayed **Webhook URL** to [configure](#create-a-squadcast-webhook-alert-in-solarwinds-orion) it within **SolarWinds.** Finish by clicking **Add Alert Source** -> **Done.** ![](/files/3VVb1Cf2SaD3imKOwMyC) {% hint style="warning" %} **Important:** When an alert source turns Active, it’ll show up under Configured Alert Sources, you can either generate a test alert from the integration or wait for a real-time alert to be generated by the Alert Source. An Alert Source is active if there is a recorded incident via that Alert Source for the Service. {% endhint %} ### Create a Squadcast Webhook Alert in SolarWinds **Orion** **(1)** Login to your SolarWinds dashboard. Head over to the **ALERTS & ACTIVITY** tab. Then select **Alerts** ![](/files/85dAATFWWGYlmapmdC0O) **(2)** Click on **Manage Alerts**, then under the **ALERT MANAGER** section, click on **ADD NEW ALERT** ![](/files/KJE69F3pQD856sXKurPI) ![](/files/MvAyHxABiJVEqrFWiXPv) **(3)** Under Alert Properties, set the **Name of alert definition** and the **Description of alert definition**. Toggle the **Enabled (On/Off)** switch to **ON** and click on **NEXT** ![](/files/DXTTBHcnZ2p5cufoKHXu) **(4)** Set the **Trigger Conditions** and **Reset Conditions** and click on **NEXT** ![](/files/6apFL1TOeUtHS0n1bWiQ) ![](/files/R5ZihIgu8r83BcFH4zDK) **(5)** Under **Trigger Actions**, click on **Add Action**. Then select **Send a GET or POST Request to a Web Server** and click on **CONFIGURE ACTION** ![](/files/PpRTpf2vAkDZYhgLFPzV) ![](/files/ZpHJsfjuwkSdtCv288ha) **(6)** Set the **name of action**. Paste the previously copied Squadcast Webhook URL in the placeholder for **URL**. Select **Use HTTP/S POST** and paste the variables mentioned below in the **Body to POST** box. Set **ContentType** as **application/x-www-form-urlencoded** and **None** under **Authentication**. Click on **ADD ACTION**, then on **NEXT** ![](/files/9A5wgc3JRmwNErsOoMUy) ``` EventID=${N=Alerting;M=AlertObjectID}-${N=Alerting;M=AlertID}&AcknowledgeLink=${N=Alerting;M=AcknowledgeLink}&AcknowledgeUrl=${N=Alerting;M=AcknowledgeUrl}&Acknowledged=${N=Alerting;M=Acknowledged}&AcknowledgedBy=${N=Alerting;M=AcknowledgedBy}&AcknowledgedTime=${N=Alerting;M=AcknowledgedTime;F=DateTime}&AlertActiveID=${N=Alerting;M=AlertActiveID}&AlertDefID=${N=Alerting;M=AlertDefID}&AlertDescription=${N=Alerting;M=AlertDescription}&AlertDetailsUrl=${N=Alerting;M=AlertDetailsUrl}&AlertID=${N=Alerting;M=AlertID}&TimeOfDay=${N=Alerting;M=TimeOfDay}&Severity=${N=Alerting;M=Severity}&ObjectType=${N=Alerting;M=ObjectType}&Notes=${N=Alerting;M=Notes}&LongAlertTriggerTime=${N=Alerting;M=LongAlertTriggerTime;F=DateTime}&LastEdit=${N=Alerting;M=LastEdit;F=DateTime}&DownTime=${N=Alerting;M=DownTime}&AlertTriggerTime=${N=Alerting;M=AlertTriggerTime;F=DateTime}&AlertTriggerCount=${N=Alerting;M=AlertTriggerCount}&AlertObjectID=${N=Alerting;M=AlertObjectID}&AlertName=${N=Alerting;M=AlertName}&AlertMessage=${N=Alerting;M=AlertMessage}&Status=Triggered ``` {% hint style="info" %} **Note:** **Custom User Defined Variables** Users can define two custom variables under Trigger Actions. The two variables can be added in the format mentioned below : **\&CustomVariable1Name=\[Name]\&CustomVariable1Value=\[Value]\&CustomVariable2Name=\[Name]\&CustomVariable2Value=\[Value]** Replace the **\[Name]** & **\[Value]** with proper values and add at the end of the variables mentioned in **Step 6**. This is how it would look like : ``` EventID=${N=Alerting;M=AlertObjectID}-${N=Alerting;M=AlertID}&AcknowledgeLink=${N=Alerting;M=AcknowledgeLink}&AcknowledgeUrl=${N=Alerting;M=AcknowledgeUrl}&Acknowledged=${N=Alerting;M=Acknowledged}&AcknowledgedBy=${N=Alerting;M=AcknowledgedBy}&AcknowledgedTime=${N=Alerting;M=AcknowledgedTime;F=DateTime}&AlertActiveID=${N=Alerting;M=AlertActiveID}&AlertDefID=${N=Alerting;M=AlertDefID}&AlertDescription=${N=Alerting;M=AlertDescription}&AlertDetailsUrl=${N=Alerting;M=AlertDetailsUrl}&AlertID=${N=Alerting;M=AlertID}&TimeOfDay=${N=Alerting;M=TimeOfDay}&Severity=${N=Alerting;M=Severity}&ObjectType=${N=Alerting;M=ObjectType}&Notes=${N=Alerting;M=Notes}&LongAlertTriggerTime=${N=Alerting;M=LongAlertTriggerTime;F=DateTime}&LastEdit=${N=Alerting;M=LastEdit;F=DateTime}&DownTime=${N=Alerting;M=DownTime}&AlertTriggerTime=${N=Alerting;M=AlertTriggerTime;F=DateTime}&AlertTriggerCount=${N=Alerting;M=AlertTriggerCount}&AlertObjectID=${N=Alerting;M=AlertObjectID}&AlertName=${N=Alerting;M=AlertName}&AlertMessage=${N=Alerting;M=AlertMessage}&Status=Triggered&CustomVariable1Name=[Name]&CustomVariable1Value=[Value]&CustomVariable2Name=[Name]&CustomVariable2Value=[Value] ``` {% endhint %} {% hint style="info" %} **Note:** **Custom User Defined Incident Message** Users can define custom Incident Message under Trigger Actions. The variable can be added in the format mentioned below : **\&CustomIncidentMessage=\[IncidentMessage]** Replace the **\[IncidentMessage]** with proper values and add at the end of the variables mentioned in **Step 6**. This is how it would look like : ``` EventID=${N=Alerting;M=AlertObjectID}-${N=Alerting;M=AlertID}&AcknowledgeLink=${N=Alerting;M=AcknowledgeLink}&AcknowledgeUrl=${N=Alerting;M=AcknowledgeUrl}&Acknowledged=${N=Alerting;M=Acknowledged}&AcknowledgedBy=${N=Alerting;M=AcknowledgedBy}&AcknowledgedTime=${N=Alerting;M=AcknowledgedTime;F=DateTime}&AlertActiveID=${N=Alerting;M=AlertActiveID}&AlertDefID=${N=Alerting;M=AlertDefID}&AlertDescription=${N=Alerting;M=AlertDescription}&AlertDetailsUrl=${N=Alerting;M=AlertDetailsUrl}&AlertID=${N=Alerting;M=AlertID}&TimeOfDay=${N=Alerting;M=TimeOfDay}&Severity=${N=Alerting;M=Severity}&ObjectType=${N=Alerting;M=ObjectType}&Notes=${N=Alerting;M=Notes}&LongAlertTriggerTime=${N=Alerting;M=LongAlertTriggerTime;F=DateTime}&LastEdit=${N=Alerting;M=LastEdit;F=DateTime}&DownTime=${N=Alerting;M=DownTime}&AlertTriggerTime=${N=Alerting;M=AlertTriggerTime;F=DateTime}&AlertTriggerCount=${N=Alerting;M=AlertTriggerCount}&AlertObjectID=${N=Alerting;M=AlertObjectID}&AlertName=${N=Alerting;M=AlertName}&AlertMessage=${N=Alerting;M=AlertMessage}&Status=Triggered&CustomVariable1Name=[Name]&CustomVariable1Value=[Value]&CustomVariable2Name=[Name]&CustomVariable2Value=[Value]&CustomIncidentMessage=[IncidentMessage] ``` {% endhint %} **(7)** Under **RESET ACTIONS**, click on **Add Action**. Then select **Send a GET or POST Request to a Web Server** and click on **CONFIGURE ACTION** ![](/files/Xlj7jGhkV7P8F2TcEWnW) ![](/files/fJtpIWzWJvBQbQCeECDB) **(8)** Set the **name of action**. Paste the previously copied Squadcast Webhook URL in the placeholder for **URL**. Select **Use HTTP/S POST** and paste the variables mentioned below in the **Body to POST** box. Set **ContentType** as **application/x-www-form-urlencoded** and **None** under **Authentication**. Click on **ADD ACTION**, then on **NEXT** ![](/files/3eEKXziV5LPSzbyHJtA0) ``` EventID=${N=Alerting;M=AlertObjectID}-${N=Alerting;M=AlertID}&AcknowledgeLink=${N=Alerting;M=AcknowledgeLink}&AcknowledgeUrl=${N=Alerting;M=AcknowledgeUrl}&Acknowledged=${N=Alerting;M=Acknowledged}&AcknowledgedBy=${N=Alerting;M=AcknowledgedBy}&AcknowledgedTime=${N=Alerting;M=AcknowledgedTime;F=DateTime}&AlertActiveID=${N=Alerting;M=AlertActiveID}&AlertDefID=${N=Alerting;M=AlertDefID}&AlertDescription=${N=Alerting;M=AlertDescription}&AlertDetailsUrl=${N=Alerting;M=AlertDetailsUrl}&AlertID=${N=Alerting;M=AlertID}&TimeOfDay=${N=Alerting;M=TimeOfDay}&Severity=${N=Alerting;M=Severity}&ObjectType=${N=Alerting;M=ObjectType}&Notes=${N=Alerting;M=Notes}&LongAlertTriggerTime=${N=Alerting;M=LongAlertTriggerTime;F=DateTime}&LastEdit=${N=Alerting;M=LastEdit;F=DateTime}&DownTime=${N=Alerting;M=DownTime}&AlertTriggerTime=${N=Alerting;M=AlertTriggerTime;F=DateTime}&AlertTriggerCount=${N=Alerting;M=AlertTriggerCount}&AlertObjectID=${N=Alerting;M=AlertObjectID}&AlertName=${N=Alerting;M=AlertName}&AlertMessage=${N=Alerting;M=AlertMessage}&Status=Resolved ``` **(9)** Finalize the Alert Details on the **SUMMARY** page and click on **SUBMIT** ![](/files/rJLgjsXGk1NRKzeUYf2K) That's it, you are good to go! Your SolarWinds Orion integration is now complete. Whenever SolarWinds fires an alert through **Trigger Actions**, an incident will be created in Squadcast for it. Also, when an alert has been **RESET** in SolarWinds Orion, the corresponding incident gets **auto-resolved** in Squadcast. *Have any questions?* [*Ask the community*](https://community.squadcast.com/view/home)*.* --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://support.incidents.cloud.solarwinds.com/integrations/alert-source-integrations-native/solarwinds_orion.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.