Configuring notification senders
On the Notification Senders Configuration page, enable one or more notification methods and fill in the method’s method-specific settings. Save your settings to the server, or revert to discard your current changes. By default, the sender is shown for one instance of each notification type.
You can add or delete as many senders of your choosing. To view all configurable options, select a sender to expand, or select Expand All to view all. You can also filter senders by type from the Display drop-down menu.
Notification senders include a “Default Template Tag” field, which allows you to apply distinct styles and formats to your notification messages. During configuration, you can select the default template tag from a drop-down menu listing the available tags for the sender type. These default values will be pre-selected when you use the sender in an Alert Profile, but you have the option to choose a different template tag from the drop-down list if desired.
About notification senders
Email settings
Riverbed IQ settings
Slack settings
ServiceNow settings
Splunk settings
Syslog settings
SNMP traps settings
xMatters settings
Configuring notification templates
Email settings
Email notifications send alert messages to one or more individuals via email.
Display Name
Specifies a unique display name.
Server
Enables you to enter the FQDN, IP address, or hostname of the SMTP server.
Port
Specifies the SMTP server port. The default value is 25.
For implicit SMTP, use port number 465. For explicit SMTP, use port number 587.
Sender Email Address
Specifies an email address for sending alerts.
Authentication
Specifies one of these authentication types from the drop-down list:
None does not require authentication.
Normal Password requires a username and password for authentication.
SMTP User
Optionally, specifies the account for sending alert emails for SMTP servers that require authentication.
SMTP Password
Optionally, specifies the password for SMTP authentication.
Connection Security
Specifies one of these connection security types from the drop-down list:
None does not require connection security.
STARTTLS starts the TLS command before communication.
SSL/TLS enables SSL/TLS encryption.
Test E-mail Recipients
Specifies email recipients to test the defined email notification.
Default Template Tag
Specifies a default notification template tag from the drop-down list.
Send Test E-mail
Optionally, tests the defined email notification.
Configuring notification senders
Riverbed IQ settings
Display Name
Specifies a unique display name.
Tenant
Specifies the name of the Riverbed IQ tenant.
The tenant name can be determined by analyzing the URL of Riverbed IQ user interface. The following format is used:
https://tenant-name.clould.riverbed.com/…
Client ID
Specifies the OAuth client ID for NetIM on the Riverbed IQ instance.
Client Secret
Specifies the OAuth client secret for NetIM on the Riverbed IQ instance.
Trigger
Optionally, specifies the trigger for the Riverbed IQ notification.
Default Template Tag
Specifies a default notification template tag from the drop-down list.
Send Test IQ Message
Optionally, tests the defined Riverbed IQ notification.
Configuring notification senders
About Riverbed IQ alert notification setup
Slack settings
Slack notifications send alert messages to Slack channels using webhooks.
For instructions on creating Slack webhooks, log in to your Slack account and search for:
"Incoming Webhooks"
"Send data into Slack in real-time"
"Add Incoming Webhooks Integration"
Display Name
Specifies a unique display name.
Webhook address
Specifies the URL that contains the webhook endpoint to which you need to post a REST request.
Default Template Tag
Specifies a default notification template tag from the drop-down list.
Send Test Slack Message
Optionally, tests the defined Slack notification.
Configuring notification senders
ServiceNow settings
ServiceNow notifications send alert data to ServiceNow for incident management and tracking.
Basic authentication (Basic) and Open authentication (OAuth) are supported for authenticating with the ServiceNow platform. Coordinate with your ServiceNow administrator to obtain the required client ID and client secret for configuring ServiceNow for OAuth.
The username and password you provide will be encrypted and stored on the NetIM server.
The API endpoint is the default endpoint used for the NetIM ServiceNow integration. Do not change the API endpoint unless instructed to do so by Riverbed Support and your ServiceNow administrator.
The Advanced Options configurations are only required in special cases and can be ignored. When configuring the ServiceNow integration for OAuth, you will be asked to provide login credentials to ServiceNow.
Display Name
Specifies a unique display name.
Protocol
Specifies HTTP or HTTPS.
Server
Specifies the IP or FQDN of the ServiceNow instance.
Authentication method
Specifies one of these authentication types from the drop-down list:
Basic
OAuth
Username
(Appears only when you select basic authentication.) Specifies the username for the ServiceNow instance.
Password
(Appears only when you select basic authentication.) Specifies the password for the ServiceNow instance.
Client ID
(Appears only when you select OAuth authentication.) Specifies the OAuth client ID for NetIM on the ServiceNow instance.
Client Secret
(Appears only when you select OAuth authentication.) Specifies the OAuth client secret for NetIM on the ServiceNow instance.
Auth URL
(Appears only when you select OAuth authentication.) Specifies the OAuth authentication URL on the ServiceNow instance.
Access Token URL
(Appears only when you select OAuth authentication.) Specifies the OAuth access token URL on the ServiceNow instance.
Scope
(Appears only when you select OAuth authentication.) Specifies the OAuth scope when authenticating with the ServiceNow instance.
OAuth Refresh Token
(Appears only when you select OAuth authentication.) Specifies the OAuth refresh token to authenticate with the ServiceNow instance. (Required if not using the log in link on this page, or if the login process failed.)
End Point
Specifies the ServiceNow endpoint.
Log in to ServiceNow
(Appears only when you specify the client ID and client secret.) This step is required to obtain the OAuth Refresh Token. Once you successfully log in to ServiceNow, a browser page will launch. Close the browser window and return to the configuration settings to continue the ServiceNow setup. At this point you have obtained the OAuth Refresh Token and it has been automatically added to the configuration settings. You can test the ServiceNow integration with the test button. Check your ServiceNow application to ensure the test message reached ServiceNow.
Default Template Tag
Specifies a default notification template tag from the drop-down list.
Send Test ServiceNow Message
Optionally, tests the defined ServiceNow notification.
Configuring notification senders
Splunk settings
Splunk notifications send alert data to Splunk for analysis and monitoring.
Splunk's HEC uses a token-based authentication model. A token has a unique value, which is a 128-bit number that is represented as a 32-character globally unique identifier (GUID). You generate the token on Splunk and provide the token, along with several other parameters.
NetIM enables certificate validation by default. As such, your NetIM integration with Splunk may require an additional step if your Splunk server's certificate is self-signed or from a CA that is not in Java's set of trusted CAs, in which case, you must download and import the Splunk server's certificate into the NetIM Manager's truststore.
Display Name
Specifies a unique display name.
Protocol
Specifies HTTP or HTTPS.
Server
Specifies the IP or FQDN of the Splunk instance.
Port
Specifies the Splunk HEC port number. The default value is 8088.
Private Token
A 32-character globally unique identifier (GUID) key that you must generate on Splunk and supply to NetIM in order to successfully send the notification. For example: B5A79AAD-D822-46CC-80D1-819F80D7BFB.
Index
Remember to import the SSL certificate on the swarm manager.
The name of the Splunk tag ("index") that should be used to store the notifications from NetIM.
End Point
NetIM sends notifications to Splunk in JSON-format only.
The Splunk HEC endpoint you want to use: for example, /services/collector/event.
Default Template Tag
Specifies a default notification template tag from the drop-down list.
Send Test Splunk Message
Splunk will appear as a destination for alerts in the Alert Profiles page.
Default Splunk notification templates are provided in the Notification Templates page and can be cloned and edited like other notification templates.
Optionally, tests the defined Splunk notification.
You will be presented with a dialog indicating whether the test was successful or not. The test message diagnostic dialog text is usually sufficient to identify any issues if the test was not successful. Confirm with your Splunk administrator that the test notification was received and is the expected format and content. For further troubleshooting you can download and view logs from NetIM's Service Status page. The ability to download and view logs related to all notification sending are located under the Swarm Services, Notification Sender section of the System Status page.
Configuring notification senders
About the Splunk server certificate
About alert profiles
Syslog settings
Syslog notifications send alert messages to a syslog server for centralized logging.
Display Name
Specifies a unique display name.
Protocol
Specifies UDP or TCP.
Server
Specifies the syslog server address. The default value is localhost.
Port
Specifies the server port number. The default value is 514.
Default Template Tag
Specifies a default notification template tag from the drop-down list.
Send Test Syslog Message
Optionally, tests the defined syslog notification.
Configuring notification senders
SNMP traps settings
SNMP traps notifications allow you to send alerts to network management software using SNMP protocol.
Display name
Specifies a descriptive GUI label for the item.
Address
Specifies an IP address or hostname.
Port
Specifies the server port number. The default value is 162.
Version
Can be versions 1, 2c, or 3.
Community String
Specifies the password-like community string to control access.
Security Level
(Appears only when you select v3.) Determines whether a single atomic message exchange is authenticated. Select one of these levels from the drop-down list:
Unknown. This is the default setting
NO_AUTH_NO_PRIV doesn’t authenticate packets and doesn’t use privacy.
AUTH_NO_PRIV authenticates packets but doesn’t use privacy.
AUTH_PRIV authenticates packets using AES 128 and DES to encrypt messages for privacy.
Username
(Appears only when you select v3.) Specifies a username.
Context Name
Specifies a context name.
Auth Protocol
(Appears only when you select v3, and either AUTH_NO_PRIV or AUTH_PRIV.) Indicates a protocol from the drop-down list.
Auth Password
(Appears only when you select v3, and either AUTH_NO_PRIV or AUTH_PRIV.) Specifies a password.
Priv Protocol
(Appears only when you select v3 and AUTH_PRIV.) Indicates a protocol from the drop-down list.
Priv Password
(Appears only when you select v3 and AUTH_PRIV.) Specifies a password. The password must have a minimum of eight characters. Confirm the password in the Privacy Password Confirm text box.
Default Template Tag
Specifies a default notification template tag from the drop-down list.
Send Test Trap
Optionally, tests the defined SNMP trap destination.
Configuring notification senders
xMatters settings
xMatters notifications send alert messages to xMatters using webhooks for incident management.
Display Name
Specifies a unique display name.
Webhook address
Specifies the URL that contains the webhook endpoint to which you need to post a REST request.
Default Template Tag
Specifies a default notification template tag from the drop-down list.
Send Test xMatters Message
Optionally, tests the defined xMatters notification.
Configuring notification senders