<style>p { margin: 0; }span.fr-emoticon.fr-emoticon-img { background-repeat: no-repeat !important; font-size: inherit; height: 1em; width: 1em; min-height: 20px; min-width: 20px; display: inline-block; margin: -0.1em 0.1em 0.1em; line-height: 1; vertical-align: middle; } span.fr-emoticon { font-weight: normal; font-family: "Apple Color Emoji", "Segoe UI Emoji", "NotoColorEmoji", "Segoe UI Symbol", "Android Emoji", "EmojiSymbols"; display: inline; line-height: 0; } blockquote { border-left: solid 2px #5e35b1; color: #5e35b1; margin-left:0; padding-left:5px;}blockquote blockquote{ border-color: #00bcd4; color: #00bcd4;}blockquote blockquote blockquote{ border-color: #43a047; color: #43a047;} table.grid{ border-collapse: collapse;} table.grid td, table.grid th { border: 1px solid #ddd;} .fr-fic.fr-dib{ display: block; margin: 5px auto;}.fr-fic.fr-dib.fr-fir{ text-align: right; margin: 5px 0 5px auto;}.fr-fic.fr-dib.fr-fil{ text-align: left; margin: 5px auto 5px 0;}</style><p><strong>In this guide we will cover:</strong></p><p><strong>- What is the Azure Monitor Integration?</strong></p><p><strong>- Connecting to Azure Monitor</strong></p><p><strong>- Defaults and Mappings</strong></p><p><strong>- Creating the Webhook</strong></p><p><br></p><p><br></p><p><strong><span style="font-size: 14pt;">What is the Azure Monitor Integration?</span></strong></p><p id="isPasted">The Azure Monitor integration allows webhooks to be sent from Azure Monitor to Halo and subsequently turned into tickets. Furthermore, field mappings can be configured and if the alert is resolved, it will automatically close the ticket in Halo.</p><p><br></p><p><strong><span style="font-size: 14pt;">Connecting to Azure Monitor</span></strong></p><p>First, you must enable this integration in Configuration > Integrations > Asset Management and Alerting. Hover over the icon and click the plus - it is enabled when the colour is not greyed out.</p><p><br></p><p>The first tab is for "Azure Monitor Setup". Here you will see the URL required for the webhook, as well as the option for authentication. If "Secure Webhook" is selected as the "Action Type", additional fields for the tenant and application ID will show to provide that webhook authentication.</p><p><br></p><p><em><strong>Note: The tenant used to authenticate must be a single-tenanted application.</strong></em></p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjdlZjk1NDQ0LTk2ODEtNDkxMi1iZjMwLTI0YWUyZjhjNGY0MyJ9.wSYlwJ3ckf2DxOnMy5D3DzPcNma5pp1Wi5-LJ4bQb94" class="fr-fic fr-fil fr-dib" width="1211" style="width: 1213px; height: 276.149px;" height="276"></p><p><strong><span style="font-size: 10pt;">Fig 1. Azure Monitor Setup tab.</span></strong></p><p><br></p><p><strong><span style="font-size: 14pt;">Defaults and Mappings</span></strong></p><p>The configuration page contains some basic setup for you to decide what happens to tickets create from an Alert.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImRkNDI1MzlhLWMwNTYtNDgyMS05M2MxLWQ2NWZlNTQ3YWY0NyJ9.rIgbvIIDc6BlOyekedAJUCXItSVkiRG07Apq2-_FSNE" class="fr-fic fr-fil fr-dib" width="1217" style="width: 1219px; height: 283.931px;" height="284"></p><p><strong><span style="font-size: 10pt;">Fig 2. Default ticket type/users/status.</span></strong></p><p><br></p><p>You can then choose any field mappings you would like. These will map information from the alert to custom fields in Halo.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRhYmM1Y2E0LTRmM2EtNGY0My04ZGUyLTZkZDA0Y2VjMmI3YyJ9.nl2r7bq3tySXhSWbJcGORlbdguyR_Hvj7MHmkVJTQCQ" class="fr-fic fr-fil fr-dib" width="1218" style="width: 1220px; height: 117.661px;" height="118"></p><p><strong><span style="font-size: 10pt;">Fig 3. Field mappings.</span></strong></p><p><br></p><p><strong><span style="font-size: 14pt;">Creating the Webhook</span></strong></p><p>The last thing you will have to do, is use the URL found at the top of the config page as the webhook URL when you configure your Azure Monitor Alert Action.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjQ3ZjljNDc0LWQzY2EtNDRjNC04MzIwLTRkZjcyOGQzNmQzYyJ9.HaJkF2sG0_1V7MO7DxkaDFKoUwZHEwYRCPji5poigH4" class="fr-fic fr-fil fr-dib" width="567" height="432"></p><p><strong><span style="font-size: 10pt;">Fig 4. Adding a webhook.</span></strong></p><p><br></p><p><strong><em>Note: You must enable the common alert schema otherwise the webhook will not be processed by Halo.</em></strong></p><p><br></p><p>If you would like more information on how to create and configure alerts in Azure Monitor, please see this guide from Microsoft: <a href="https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-overview" id="isPasted" target="_blank" rel="noopener noreferrer"><strong>Overview of Azure Monitor Alerts</strong></a>.</p><p><br></p><p><strong data-pasted="true"><span style="font-size: 14pt;">Secure Webhooks</span></strong></p><p>If using secure webhooks, please note that we only support version 2 access tokens. This means you need to ensure the Azure Entra ID app registration has this reflected in the Microsoft Graph App Manifest file.</p><p><br></p><p>Within the manifest file of the app registration, ensure 'api.requestedAccessTokenVersion' is set to 2, as below:</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjY1NTRhODkzLWU2ZGQtNDc5Zi04OGRjLThmZTNhMWEyNGViNyJ9.YCdrO4WBnwezkXU575DQ_dtP7vBF5MHKGuWza0RW5TU" class="fr-fic fr-fil fr-dib" width="709" style="width: 711px; height: 614.501px;" height="615"></p><p><br></p><p>Once you've done that, it will take a while to update, as this is heavily cached by Microsoft. You should be able to speed it along by adding a scope and then removing it straight after:</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjlmM2UzNjE5LTJiYmMtNDcxNC1iZmZkLTJlNjZlMWM1Y2I5NiJ9.s5Q3flol4-Uykh2EB-wHPt2f-QGXSpbFW8YmEPhDJEY" class="fr-fic fr-fil fr-dib" width="1025" style="width: 1027px; height: 661.473px;" height="661"></p>
