Skip to content

Commit b323b26

Browse files
ymao1gchapskibanamachine
committed
[Actions][Doc] Clean up Actions README (#91789)
* Removing REST API from README. Updating configuration docs * Updating action config docs * Cleaning up action type configs in README and user docs * Cleaning up action type configs in README and user docs * Fixing formatting * Apply suggestions from code review Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com> * PR fixes * Update x-pack/plugins/actions/README.md Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com> Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com> Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
1 parent b4bfa8b commit b323b26

12 files changed

Lines changed: 204 additions & 575 deletions

File tree

docs/user/alerting/action-types/email.asciidoc

Lines changed: 13 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -13,12 +13,12 @@ NOTE: For emails to have a footer with a link back to {kib}, set the <<server-pu
1313
Email connectors have the following configuration properties:
1414

1515
Name:: The name of the connector. The name is used to identify a connector in the management UI connector listing, or in the connector list when configuring an action.
16-
Sender:: The from address for all emails sent with this connector, specified in `user@host-name` format.
16+
Sender:: The from address for all emails sent with this connector. This can be specified in `user@host-name` format or as `"human name <user@host-name>"` format. See the https://nodemailer.com/message/addresses/[Nodemailer address documentation] for more information.
1717
Host:: Host name of the service provider. If you are using the <<action-settings, `xpack.actions.allowedHosts`>> setting, make sure this hostname is added to the allowed hosts.
1818
Port:: The port to connect to on the service provider.
1919
Secure:: If true, the connection will use TLS when connecting to the service provider. Refer to the https://nodemailer.com/smtp/#tls-options[Nodemailer TLS documentation] for more information. If not true, the connection will initially connect over TCP, then attempt to switch to TLS via the SMTP STARTTLS command.
20-
Username:: username for 'login' type authentication.
21-
Password:: password for 'login' type authentication.
20+
User:: Username for login type authentication.
21+
Password:: Password for login type authentication.
2222

2323
[float]
2424
[[Preconfigured-email-configuration]]
@@ -40,11 +40,14 @@ Password:: password for 'login' type authentication.
4040
--
4141

4242
[[email-connector-config-properties]]
43-
`config` defines the action type specific to the configuration and contains the following properties:
43+
**`config`** defines the action type specific to the configuration and contains the following properties:
4444

4545
[cols="2*<"]
4646
|===
4747

48+
| `service`
49+
| The name of a https://nodemailer.com/smtp/well-known/[well-known email service provider]. If `service` is provided, `host`, `port`, and `secure` properties are ignored. For more information on the `gmail` service value, see the (https://nodemailer.com/usage/using-gmail/)[Nodemailer Gmail documentation].
50+
4851
| `from`
4952
| An email address that corresponds to *Sender*.
5053

@@ -57,18 +60,21 @@ Password:: password for 'login' type authentication.
5760
| `secure`
5861
| A boolean that corresponds to *Secure*.
5962

63+
| `hasAuth`
64+
| If `true`, this connector will require values for `user` and `password` inside the secrets configuration. Defaults to `true`.
65+
6066
|===
6167

62-
`secrets` defines sensitive information for the action type:
68+
**`secrets`** defines sensitive information for the action type and contains the following properties:
6369

6470
[cols="2*<"]
6571
|===
6672

6773
| `user`
68-
| A string that corresponds to *User*.
74+
| A string that corresponds to *User*. Required if `hasAuth` is set to `true`.
6975

7076
| `password`
71-
| A string that corresponds to *Password*. Should be stored in the <<creating-keystore, {kib} keystore>>.
77+
| A string that corresponds to *Password*. Should be stored in the <<creating-keystore, {kib} keystore>>. Required if `hasAuth` is set to `true`.
7278

7379
|===
7480

docs/user/alerting/action-types/index.asciidoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ Execution time field:: This field will be automatically set to the time the ale
3131
--
3232

3333
[[index-connector-config-properties]]
34-
`config` defines the action type specific to the configuration and contains the following properties:
34+
**`config`** defines the action type specific to the configuration and contains the following properties:
3535

3636
[cols="2*<"]
3737
|===
@@ -40,7 +40,7 @@ Execution time field:: This field will be automatically set to the time the ale
4040
| A string that corresponds to *Index*.
4141

4242
|`refresh`
43-
| A boolean that corresponds to *Refresh*.
43+
| A boolean that corresponds to *Refresh*. Defaults to `false`.
4444

4545
|`executionTimeField`
4646
| A string that corresponds to *Execution time field*.

docs/user/alerting/action-types/jira.asciidoc

Lines changed: 40 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ API token (or password):: Jira API authentication token (or password) for HTTP
3434
--
3535

3636
[[jira-connector-config-properties]]
37-
`config` defines the action type specific to the configuration and contains the following properties:
37+
**`config`** defines the action type specific to the configuration and contains the following properties:
3838

3939
[cols="2*<"]
4040
|===
@@ -47,7 +47,7 @@ API token (or password):: Jira API authentication token (or password) for HTTP
4747

4848
|===
4949

50-
`secrets` defines sensitive information for the action type:
50+
**`secrets`** defines sensitive information for the action type and contains the following properties:
5151

5252
[cols="2*<"]
5353
|===
@@ -65,14 +65,44 @@ API token (or password):: Jira API authentication token (or password) for HTTP
6565

6666
Jira actions have the following configuration properties:
6767

68-
Issue type:: The type of the issue.
69-
Priority:: The priority of the incident.
70-
Labels:: The labels of the incident.
71-
Title:: A title for the issue, used for searching the contents of the knowledge base.
72-
Description:: The details about the incident.
73-
Parent:: The parent issue id or key. Only for `Sub-task` issue types.
74-
Priority:: The priority of the incident.
75-
Additional comments:: Additional information for the client, such as how to troubleshoot the issue.
68+
Subaction:: The subaction to perform: `pushToService`, `getIncident`, `issueTypes`, `fieldsByIssueType`, `issues`, `issue`, or `getFields`.
69+
Subaction params:: The parameters of the subaction.
70+
71+
==== `pushToService` subaction configuration
72+
73+
Incident:: A Jira incident has the following properties:
74+
* `summary` - The title of the issue.
75+
* `description` - A description of the issue.
76+
* `externalId` - The ID of the issue in Jira. If present, the issue is updated. Otherwise, a new issue is created.
77+
* `issueType` - The ID of the issue type in Jira.
78+
* `priority` - The priority level in Jira. Example: `Medium`.
79+
* `labels` - An array of labels. Labels cannot contain spaces.
80+
* `parent` - The parent issue ID or key. Only for subtask issue types.
81+
Comments:: A comment in the form of `{ commentId: string, version: string, comment: string }`.
82+
83+
==== `getIncident` subaction configuration
84+
85+
External ID:: The ID of the issue in Jira.
86+
87+
==== `issueTypes` subaction configuration
88+
89+
The `issueTypes` subaction has no parameters. Provide an empty object `{}`.
90+
91+
==== `fieldsByIssueType` subaction configuration
92+
93+
ID:: The ID of the issue in Jira.
94+
95+
==== `issues` subaction configuration
96+
97+
Title:: The title to search for.
98+
99+
==== `issue` subaction configuration
100+
101+
ID:: The ID of the issue in Jira.
102+
103+
==== `getFields` subaction configuration
104+
105+
The `getFields` subaction has no parameters. Provide an empty object `{}`.
76106

77107
[[configuring-jira]]
78108
==== Configuring and testing Jira

docs/user/alerting/action-types/pagerduty.asciidoc

Lines changed: 17 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -151,14 +151,25 @@ Integration Key:: A 32 character PagerDuty Integration Key for an integration
151151
--
152152

153153
[[pagerduty-connector-config-properties]]
154-
`config` defines the action type specific to the configuration.
155-
`config` contains
156-
`apiURL`, a string that corresponds to *API URL*.
154+
**`config`** defines the action type specific to the configuration and contains the following properties:
157155

158-
`secrets` defines sensitive information for the action type.
159-
`secrets` contains
160-
`routingKey`, a string that corresponds to *Integration Key*.
156+
[cols="2*<"]
157+
|===
161158

159+
|`apiURL`
160+
| A URL string that corresponds to *API URL*.
161+
162+
|===
163+
164+
**`secrets`** defines sensitive information for the action type and contains the following properties:
165+
166+
[cols="2*<"]
167+
|===
168+
169+
|`routingKey`
170+
| A string that corresponds to *Integration Key*.
171+
172+
|===
162173

163174
[float]
164175
[[pagerduty-action-configuration]]

docs/user/alerting/action-types/resilient.asciidoc

Lines changed: 26 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ API key secret:: The authentication key secret for HTTP Basic authentication.
3434
--
3535

3636
[[resilient-connector-config-properties]]
37-
`config` defines the action type specific to the configuration and contains the following properties:
37+
**`config`** defines the action type specific to the configuration and contains the following properties:
3838

3939
[cols="2*<"]
4040
|===
@@ -47,7 +47,7 @@ API key secret:: The authentication key secret for HTTP Basic authentication.
4747

4848
|===
4949

50-
`secrets` defines sensitive information for the action type:
50+
**`secrets`** defines sensitive information for the action type and contains the following properties:
5151

5252
[cols="2*<"]
5353
|===
@@ -65,11 +65,30 @@ API key secret:: The authentication key secret for HTTP Basic authentication.
6565

6666
IBM Resilient actions have the following configuration properties:
6767

68-
Incident types:: The incident types of the incident.
69-
Severity code:: The severity of the incident.
70-
Name:: A name for the issue, used for searching the contents of the knowledge base.
71-
Description:: The details about the incident.
72-
Additional comments:: Additional information for the client, such as how to troubleshoot the issue.
68+
Subaction:: The subaction to perform: `pushToService`, `getFields`, `incidentTypes`, or `severity`.
69+
Subaction params:: The parameters of the subaction.
70+
71+
==== `pushToService` subaction configuration
72+
73+
Incident:: The IBM resilient incident has the following properties:
74+
* `name` - A name for the issue, used for searching the contents of the knowledge base.
75+
* `description` - The details about the incident.
76+
* `externalId` - The ID of the incident in IBM Resilient. If present, the incident is updated. Otherwise, a new incident is created.
77+
* `incidentTypes` - An array with the IDs of IBM Resilient incident types.
78+
* `severityCode` - The IBM Resilient ID of the severity code.
79+
Comments:: A comment in the form of `{ commentId: string, version: string, comment: string }`.
80+
81+
===== `getFields` subaction configuration
82+
83+
The `getFields` subaction has not parameters. Provide an empty object `{}`.
84+
85+
===== `incidentTypes` subaction configuration
86+
87+
The `incidentTypes` subaction has no parameters. Provide an empty object `{}`.
88+
89+
===== `severity` subaction configuration
90+
91+
The `severity` subaction has no parameters. Provide an empty object `{}`.
7392

7493
[[configuring-resilient]]
7594
==== Configuring and testing IBM Resilient

docs/user/alerting/action-types/server-log.asciidoc

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,3 +30,4 @@ Name:: The name of the connector. The name is used to identify a connector
3030
Server log actions have the following properties:
3131

3232
Message:: The message to log.
33+
Level:: The log level of the message: `trace`, `debug`, `info`, `warn`, `error` or `fatal`. Defaults to `info`.

docs/user/alerting/action-types/servicenow.asciidoc

Lines changed: 29 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ Password:: Password for HTTP Basic authentication.
3232
--
3333

3434
[[servicenow-connector-config-properties]]
35-
`config` defines the action type specific to the configuration and contains the following properties:
35+
**`config`** defines the action type specific to the configuration and contains the following properties:
3636

3737
[cols="2*<"]
3838
|===
@@ -42,7 +42,7 @@ Password:: Password for HTTP Basic authentication.
4242

4343
|===
4444

45-
`secrets` defines sensitive information for the action type:
45+
**`secrets`** defines sensitive information for the action type and contains the following properties:
4646

4747
[cols="2*<"]
4848
|===
@@ -60,12 +60,33 @@ Password:: Password for HTTP Basic authentication.
6060

6161
ServiceNow actions have the following configuration properties:
6262

63-
Urgency:: The extent to which the incident resolution can delay.
64-
Severity:: The severity of the incident.
65-
Impact:: The effect an incident has on business. Can be measured by the number of affected users or by how critical it is to the business in question.
66-
Short description:: A short description for the incident, used for searching the contents of the knowledge base.
67-
Description:: The details about the incident.
68-
Additional comments:: Additional information for the client, such as how to troubleshoot the issue.
63+
Subaction:: The subaction to perform: `pushToService`, `getFields`, `getIncident`, or `getChoices`.
64+
Subaction params:: The parameters of the subaction.
65+
66+
==== `pushToService` subaction configuration
67+
68+
Incident:: The ServiceNow incident has the following properties:
69+
* `short_description` - A short description for the incident, used for searching the contents of the knowledge base.
70+
* `description` - The details about the incident.
71+
* `externalId` - The ID of the incident in ServiceNow. If present, the incident is updated. Otherwise, a new incident is created.
72+
* `severity` - The severity of the incident.
73+
* `urgency` - The extent to which the incident resolution can delay.
74+
* `impact` - The effect an incident has on business. Can be measured by the number of affected users or by how critical it is to the business in question.
75+
* `category` - The name of the category in ServiceNow.
76+
* `subcategory` - The name of the subcategory in ServiceNow.
77+
Comments:: A comment in the form of `{ commentId: string, version: string, comment: string }`.
78+
79+
===== `getFields` subaction configuration
80+
81+
The `getFields` subaction has no parameters. Provide an empty object `{}`.
82+
83+
===== `getIncident` subaction configuration
84+
85+
External ID:: The ID of the incident in ServiceNow.
86+
87+
===== `getChoices` subaction configuration
88+
89+
Fields:: An array of fields. Example: `[priority, category, impact]`.
6990

7091
[[configuring-servicenow]]
7192
==== Configuring and testing ServiceNow

docs/user/alerting/action-types/slack.asciidoc

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -22,15 +22,19 @@ Webhook URL:: The URL of the incoming webhook. See https://api.slack.com/messa
2222
my-slack:
2323
name: preconfigured-slack-action-type
2424
actionTypeId: .slack
25-
config:
25+
secrets:
2626
webhookUrl: 'https://hooks.slack.com/services/abcd/efgh/ijklmnopqrstuvwxyz'
2727
--
2828

29-
[[slack-connector-config-properties]]
30-
`config` defines the action type specific to the configuration.
31-
`config` contains
32-
`webhookUrl`, a string that corresponds to *Webhook URL*.
29+
**`secrets`** defines sensitive information for the action type and contains the following properties:
3330

31+
[cols="2*<"]
32+
|===
33+
34+
| `webhookUrl`
35+
| A string that corresponds to *Webhook URL*.
36+
37+
|===
3438

3539
[float]
3640
[[slack-action-configuration]]

docs/user/alerting/action-types/teams.asciidoc

Lines changed: 10 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -22,14 +22,20 @@ Webhook URL:: The URL of the incoming webhook. See https://docs.microsoft.com/
2222
my-teams:
2323
name: preconfigured-teams-action-type
2424
actionTypeId: .teams
25-
config:
25+
secrets:
2626
webhookUrl: 'https://outlook.office.com/webhook/abcd@0123456/IncomingWebhook/abcdefgh/ijklmnopqrstuvwxyz'
2727
--
2828

2929
[[teams-connector-config-properties]]
30-
`config` defines the action type specific to the configuration.
31-
`config` contains
32-
`webhookUrl`, a string that corresponds to *Webhook URL*.
30+
**`secrets`** defines sensitive information for the action type and contains the following properties:
31+
32+
[cols="2*<"]
33+
|===
34+
35+
| `webhookUrl`
36+
| A string that corresponds to *Webhook URL*.
37+
38+
|===
3339

3440

3541
[float]

docs/user/alerting/action-types/webhook.asciidoc

Lines changed: 10 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -12,10 +12,10 @@ Webhook connectors have the following configuration properties:
1212

1313
Name:: The name of the connector. The name is used to identify a connector in the management UI connector listing, or in the connector list when configuring an action.
1414
URL:: The request URL. If you are using the <<action-settings, `xpack.actions.allowedHosts`>> setting, make sure the hostname is added to the allowed hosts.
15-
Method:: HTTP request method, either `post`(default) or `put`.
15+
Method:: HTTP request method, either `POST`(default) or `PUT`.
1616
Headers:: A set of key-value pairs sent as headers with the request
17-
User:: An optional username. If set, HTTP basic authentication is used. Currently only basic authentication is supported.
18-
Password:: An optional password. If set, HTTP basic authentication is used. Currently only basic authentication is supported.
17+
User:: Username for HTTP basic authentication.
18+
Password:: Password for HTTP basic authentication.
1919

2020
[float]
2121
[[Preconfigured-webhook-configuration]]
@@ -37,7 +37,7 @@ Password:: An optional password. If set, HTTP basic authentication is used. Cur
3737
--
3838

3939
[[webhook-connector-config-properties]]
40-
`config` defines the action type specific to the configuration and contains the following properties:
40+
**`config`** defines the action type specific to the configuration and contains the following properties:
4141

4242
[cols="2*<"]
4343
|===
@@ -51,18 +51,21 @@ Password:: An optional password. If set, HTTP basic authentication is used. Cur
5151
|`headers`
5252
|A record<string, string> that corresponds to *Headers*.
5353

54+
| `hasAuth`
55+
| If `true`, this connector will require values for `user` and `password` inside the secrets configuration. Defaults to `true`.
56+
5457
|===
5558

56-
`secrets` defines sensitive information for the action type:
59+
**`secrets`** defines sensitive information for the action type and contains the following properties:
5760

5861
[cols="2*<"]
5962
|===
6063

6164
|`user`
62-
|A string that corresponds to *User*.
65+
|A string that corresponds to *User*. Required if `hasAuth` is set to `true`.
6366

6467
|`password`
65-
|A string that corresponds to *Password*. Should be stored in the <<creating-keystore, {kib} keystore>>.
68+
|A string that corresponds to *Password*. Should be stored in the <<creating-keystore, {kib} keystore>>. Required if `hasAuth` is set to `true`.
6669

6770
|===
6871

0 commit comments

Comments
 (0)