vRealize Operations integration with Incident Response

vRealize Operations deliver a unified management platform to optimize, plan, and scale hybrid cloud deployments from applications to infrastructure, powered by AI/ML, as a service. The integration between vRealize Operations and Lightstep Incident Response consists of vRealize Operations alerts sent to a service in Lightstep Incident Response that can trigger and resolve incidents.

What does Lightstep Incident Response offer vRealize Operations users?

  • Notify on-call responders based on alerts sent from vRealize Operations.
  • Send enriched event data from vRealize Operations including symptoms, properties/metrics of the impacted object and related objects and recommendations for actionable resolution.
  • Create high and low urgency incidents based on the severity of the event from the vRealize Operations event payload.
  • Provides updates based on changes to alert severity, state and ownership.
  • Incidents will automatically resolve in Lightstep Incident Response when the alert in vRealize Operations is automatically cancelled.
Alerts in vRealize Operations trigger alerts in Incident Response.

Incident Response acts as a handler for these alerts and determines the right people to notify based on escalation policies, previously provided points of contact, and on-call schedules. Users are notified based on their notification preferences. Alerts are escalated until they are acknowledged or closed.

Functionality of the integration

  • vRealize Operations alerts can be configured with notification rules to send a webhook request to Incident Response's Events API as an alert event type and create a new alert on the desired Lightstep Incident Response service.
  • If the alert state, status or ownership changes, the Incident Response alert will be updated with the new information.
  • If the alert is cancelled automatically or manually in vRealize Operations, the corresponding alert will be resolved in Incident Response.
  • When an alert is triggered in vRealize Operations, an alert is created in Incident Response. When an alert is closed in vRealize Operations, it gets closed in Incident Response.
Note: If any alert is closed manually in vRealize Operations, the alert is not closed in Incident Response.