IBM Resilient action

edit

The IBM Resilient action type uses the RESILIENT REST v2 to create IBM Resilient incidents.

Connector configuration

edit

IBM Resilient connectors have the following configuration properties:

Name
The name of the connector. The name is used to identify a connector in the Stack Management UI connector listing, and in the connector list when configuring an action.
URL
IBM Resilient instance URL.
Organization ID
IBM Resilient organization ID.
API key ID
The authentication key ID for HTTP Basic authentication.
API key secret
The authentication key secret for HTTP Basic authentication.

Preconfigured action type

edit
 my-resilient:
   name: preconfigured-resilient-action-type
   actionTypeId: .resilient
   config:
     apiUrl: https://elastic.resilient.net
     orgId: ES
   secrets:
     apiKeyId: testuser
     apiKeySecret: tokenkeystorevalue

config defines the action type specific to the configuration and contains the following properties:

apiUrl

An address that corresponds to URL.

orgId

An ID that corresponds to Organization ID.

secrets defines sensitive information for the action type:

apiKeyId

A string that corresponds to API key ID.

apiKeySecret

A string that corresponds to API Key secret. Should be stored in the Kibana keystore.

Action configuration

edit

IBM Resilient actions have the following configuration properties:

Incident types
The incident types of the incident.
Severity code
The severity of the incident.
Name
A name for the issue, used for searching the contents of the knowledge base.
Description
The details about the incident.
Additional comments
Additional information for the client, such as how to troubleshoot the issue.

Configuring and testing IBM Resilient

edit

IBM Resilient offers Instances, which you can use to test incidents.