Severity and state mappings for MongoDB Cloud Manager

Alert priority and resolution state mapping between MongoDB Cloud Manager and Incident Response.

MongoDB Cloud Manager alert priority mapping

MongoDB Cloud Manager’s alert priority is based on one field in the payload.

The field of interest is eventTypeName.

MongoDB Cloud Manager payload field MongoDB Cloud Manager payload value Incident Response alert priority value
eventTypeName
  • AUTIOMATION_AGENT_DOWN
  • BACKUP_AGENT_DOWN
  • MONITORING_AGENT_DOWN
  • BI_CONNECTOR_DOWN HOST_DOWN
P1-Critical
  • HOST_EXPOSED
  • OUTSIDE_METRIC_THRESHOLD
  • ORG_LOCKED
  • ORG_SUSPENDED
  • DELINQUENT
  • NO_PRIMARY
P2-Major
  • BACKUP_AGENT_CONF_CALL_FAILURE
  • RESYNC_REQUIRED
  • ACCOUNT_DOWNGRADED
  • HOST_DOWNGRADED
  • DAILY_BILL_OVER_THRESHOLD
  • PENDING_INVOICE_OVER_THRESHOLD
  • CLUSTER_MONGOS_IS_MISSING
  • ORG_GROUP_CHARGES_OVER_THRESHOLD
  • ORG_INVOICE_OVER_THRESHOLD
  • HOST_LOCKED_DOWN
P3-Minor
  • BACKUP_AGENT_VERSION_BEHIND
  • MONITORING_AGENT_VERSION_BEHIND
  • BAD_CLUSTERSHOTS
  • INCONSISTENT_BACKUP_CONFIGURATION
  • OPLOG_BEHIND
  • CHARGE_FAILED
  • CREDIT_CARD_ABOUT_TO_EXPIRE
  • STALE_PENDING_INVOICES
  • ATTEMPT_KILLOP_AUDIT
  • ATTEMPT_KILLSESSION_AUDIT
  • DELETE_HOST_AUDIT
  • DISABLE_HOST_AUDIT
  • DB_PROFILER_DISABLE_AUDIT
  • HIDE_AND_DISABLE_HOST_AUDIT
  • HIDE_HOST_AUDIT
  • PAUSE_HOST_AUDIT
  • REMOVE_HOST_FROM_REPLICA_SET_AUDIT
  • VERSION_BEHIND
  • ORG_ADMIN_SUSPENDED
  • ORG_API_KEY_DELETED
  • ORG_CREDIT_CARD_ABOUT_TO_EXPIRE
  • ORG_DAILY_BILL_OVER_THRESHOLD
  • ORG_EMPLOYEE_ACCESS_RESTRICTED
  • ORG_TWO_FACTOR_AUTH_REQUIRED
  • ORG_USERS_WITHOUT_MFA
  • USERS_WITHOUT_MULTI_FACTOR_AUTH
  • MEMBER_REMOVED
  • TOO_FEW_HEALTHY_MEMBERS
  • TOO_MANY_ELECTIONS
  • TOO_MANY_UNHEALTHY_MEMBERS
  • TEAM_DELETED
  • TEAM_REMOVED_FROM_GROUP
  • JOIN_GROUP_REQUEST_DENIED_AUDIT
  • REMOVED_FROM_GROUP
  • REMOVED_FROM_ORG
  • REMOVED_FROM_TEAM
  • CLUSTERSHOT_DELETED_AUDIT
  • SNAPSHOT_DELETED_AUDIT
  • SHARD_REMOVED
  • DATA_EXPLORER_CRUD
P4-Warning
If MongoDB sends any informational alert, it will be mapped to P5-Informational in Incident Response. Any alert type other than the ones mentioned above will be mapped to P3-Minor.

MongoDB Cloud Manager resolution state mapping

The field of interest is status.

MongoDB Cloud Manager payload field MongoDB Cloud Manager payload value Incident Response alert resolution state value
status OPEN/INFORMATIONAL NEW
CLOSED CLOSED

If the alert type is informational, you need to close the alert manually. An alert will be closed automatically if the alert gets canceled in MongoDB Cloud Manager.

Note: If you require any other severity and state mappings, use the Generic webhook integration.