Procedure

1. Click the gear icon in the upper right quadrant of the application window and select Settings.

   

2. From the Settings menu on the left, click User Access and select Groups.
3. Click Create group.
4. Enter a group name, for example, Notifications Administrators, and a description, then click Next.
5. Select the role to add to this group, in this case Notifications administrator. Click the checkbox for that role, then click Next.
6. Add members to the group. Search for individual users or filter by username, email, or status. Check the box next to each intended member’s name, then click Next.
7. Review the details to make sure everything is correct. Click Back if you need to go back and change something.
8. Click Submit to finish creating the group.

Procedure

1. Locate the group name in Red Hat Hybrid Cloud Console > Settings menu (gear icon) > Identity & Access Management > User Access > Groups.
2. Click the menu options icon on the far right of the group name row ( ), and click Edit or Delete.
3. Make and save changes or delete the group.

1. Information about the bundle and application sending the notification

   • bundle: Name of the application bundle
   • application: Name of the individual application or service sending the event-triggered notification
   • event_type: The event type that triggered the notification
   • account_id: The Red Hat account from which the notification was sent
   • timestamp: ISO-8601 formatted date showing when the notification was sent

2. Information about the application or service-specific event

   • payload: The application payload, a JSON string containing all the data sent by the application

3. Information about the system on which the event occurred. For example:

   • inventory_id: System ID
   • hostname: System name
   • rhel_version: RHEL version running on the system

Procedure

1. Navigate to Red Hat Hybrid Cloud Console > Settings > Integrations.

2. Click Add integration.

   1. Enter an Integration name.
   2. Select an integration Type, such as webhook.
   3. Provide the Endpoint URL.

   4. The checkbox to Enable SSL verification is checked by default.

      Important

      SSL is essential for protecting the data sent to the integration endpoint. SSL should always be used when integrating Red Hat Hybrid Cloud Console to third party applications.

   5. Provide a Secret token, if required.

      Note

      If defined, the Secret token is used as an ‘X-Insight-Token’ header on the POST HTTP request.

   6. Click Save.

Procedure

1. Navigate to Insights for Red Hat Enterprise Linux > Settings.
2. In the Settings menu, expand Notifications and select an application bundle, such as Red Hat Enterprise Linux.

3. Click Create new group. The Create behavior group wizard opens.

   
4. Enter a group name, and then click Next. The Actions and recipients page appears.

5. From the Actions drop-down list, select Send an email, or select an integration from the list.

   
   • If you selected Send an email, select a recipient from the Recipient drop-down list. You may specify that the email notification should go to all users in the organization, or you can limit the recipients to administrators in the organization. If you have User Access groups configured, you may select a User Access group to receive email notifications.

   • If you selected an integration (such as Integration: Webhook or Integration: Splunk), select an integration endpoint from the Recipient drop-down list (for example, SPLUNK_AUTOMATION).

     Note

     You configure endpoints for each integration in Settings > Integrations. If an action is disabled, no integrations exist for that event type.

   • To add additional actions to notify additional integration endpoints, click Add action.

6. When you have finished adding actions, click Next. The Associate event types page appears.

   

7. Select the types of events that you want to include in your notifications. When you have finished selecting event types, click Next. The Review page appears.

   
8. Review the settings you selected for the behavior group. To modify the settings, click Back. To save the settings and create the behavior group, click Finish.

Procedure

1. Navigate to Insights for Red Hat Enterprise Linux > Settings.
2. In the Settings menu, expand Notifications and select an application bundle, such as Red Hat Enterprise Linux.
3. Click Behavior Groups to display the available behavior groups.

4. Click the More options menu (image::hcc-icons-options.png[]) in the top right corner of the behavior group you want to modify. The Edit behavior group wizard opens.

   
5. Enter a group name, and then click Next. The Actions and recipients page appears.

6. From the Actions drop-down list, select Send an email, or select an integration from the list.

   
   • If you select Send an email, select a recipient from the Recipient drop-down list. You may specify that the email notification should go to all users in the organization, or you can limit the recipients to administrators in the organization. If you have User Access groups configured, you may select a User Access group to receive email notifications.

   • If you select an integration (such as Integration: Webhook or Integration: Splunk), select an integration endpoint from the Recipient drop-down list (for example, SPLUNK_AUTOMATION).

     Note

     You configure endpoints for each integration in Settings > Integrations.

   • To add additional actions to notify additional integration endpoints, click Add action.

7. When you have finished adding actions, click Next. The Associate event types page appears.

   

8. Select the types of events that you want to include in your notifications. When you have finished selecting event types, click Next. The Review page appears.

   
9. Review the settings you selected for the behavior group. To continue to modify the settings, click Back. To save the settings for the behavior group, click Finish.

Procedure

1. Locate your user name in the upper-right part of the application window.
2. Click the arrow to the right of your username and select User Preferences.
3. In the left navigation panel, click Notifications and select the appropriate application bundle, for example Red Hat Enterprise Linux or OpenShift.

4. Select an email preference for each service.

   Important

   Selecting Instant notification for any service can potentially result in receiving a very large number of emails.

5. Click Save.

Procedure

1. Navigate to the Splunk home page.
2. Click Settings (gear icon) in the left panel to manage apps. The Apps page opens.
3. Use the Search field to search for Red Hat Insights Application for Splunk. The application appears in the search results.
4. Select the application.
5. Click Install. When the installation process completes, the message Install successful displays.

6. Click Set up now. The Set up integration with Red Hat page displays. The page includes the HTTP Event Collector (HEC) name and Default index fields.

   

7. Open Splunk in a second browser window or tab.

8. In the second Splunk page, click the Settings drop-down menu in the upper right of the page and select Indexes.

   Note

   Indexes is located in the Data section of the Settings drop-down menu.

9. Click New Index.
10. Type a name for the index in the Name field (for example, redhatinsights). Leave the rest of the fields blank.
11. Click Save. The index you created appears in the Indexes list.
12. Click Enable next to the name of the new index to enable it.
13. Navigate back to the first Splunk screen with the Set up integration with Red Hat page.
14. Type the name for the HEC in the HEC name field (for example, redhatinsights).
15. Type the name of the index you just created in the Default index field (for example, redhatinsights).
16. Click Next.
17. Click Review.
18. Click Submit. The HEC name you created appears in the HEC Name field.

19. Click Next to create the HEC URL and HEC Token.

    

20. Click Next: Configure Splunk integration in Insights. This button is disabled until you click on a Copy button for either the HEC URL or HEC token. This opens console.redhat.com in a new browser tab.

    Note

    If the new tab for console.redhat.com does not open, disable the popup blocker in your browser.

21. Click Copy to copy the HEC URL value in Splunk Enterprise, and then paste it into the Splunk HEC URL field on the Integrations page in console.redhat.com.

22. Add the port, if needed. The default port for Splunk Cloud Platform is 443. The default port for Splunk Enterprise and Splunk Cloud free trial is 8088.

    

Procedure

1. From the Splunk main page, navigate to Settings.

2. Select Data Inputs, and then select HTTP Event Collector. The HTTP Event Collector page shows the HEC, its Token value, the corresponding index that you selected during setup, and the status of the HEC.

   

3. Click Global Settings in the upper right corner of the page. The Edit Global Settings dialog box displays.

   

4. Select Enabled. This enables the HEC token that was automatically created during the setup process.

Procedure

1. Navigate to Settings, and then select My User Access from the drop-down menu.
2. Select Groups. The Groups page appears.
3. Click Create Group. The Name and Description page appears.
4. Create a name for the group (for example, splunknotifgroup) and click Next. The Add Roles page appears.
5. To create the Notifications Administrator role, click in the Search field and type notif.
6. Select Notifications Administrator from the search results, and then click Next. The Add Members page appears.
7. Select the group members from the list who should have Notifications Administrator role.
8. Click Next. The Review Details page appears.
9. Review the details: Group Name, Role, and Members, and then click Submit.

Procedure

1. Navigate to Settings, and select Integrations from the drop-down menu. The Integrations page appears.

2. Click Add Integration. The Add Integration dialog box appears.

   

3. Click Type from the drop-down menu and select Splunk.
4. Type a name for your new integration into the Integration Name field (for example, redhat_splunk).

5. In the Endpoint URL field, add your Splunk HEC endpoint URL.

   1. For Splunk Enterprise, Splunk uses port 8088 by default. For example: https://<splunk-endpoint>:8088

   2. For Splunk Cloud, Splunk uses port 443. For more information about Splunk Cloud on AWS or GCP, see Send data to HTTP Event Collector.

      Important

      The service automatically adds <endpoint> (the http path). You do not need to include it in the form input for the Endpoint URL.

6. In the Secret token field, add the Splunk HEC token value.
7. Optional. Add any notes or other information about this integration to the Extras field.
8. Click Save.

Procedure

1. Log in to your ServiceNow instance.

2. Navigate to the ServiceNow Store home page.

   1. Install the Flow Templates for Red Hat Insights from the ServiceNow Store (or as an Update Set).
   2. Create a new user with User ID rh_insights_integration.
   3. Check Internal Integration User for the user you just created.
   4. Ensure that the user is Active.
   5. Assign role x_rhtpp_rh_webhook.rest to the user.
   6. Generate a password for the user. Copy this information for use during the setup process.
3. Open console.redhat.com in a new browser window or tab.

4. Navigate to Red Hat Hybrid Cloud Console > Settings > Integrations. For more information about how to set up integrations, see Configuring integrations.

   1. Click Add integration.
   2. Create a name for the integration, such as ServiceNow integration.
   3. Select the ServiceNow integration type.
   4. Provide this Endpoint URL and replace <instance.servicenow.com> with your ServiceNow instance: https://<instance.servicenow.com>/api/x_rhtpp_rh_webhook/flow_templates_for_red_hat_insights.
   5. The checkbox to Enable SSL is checked by default.
   6. In the Secret token field, paste the generated password of the rh_insights_integration user that you created in ServiceNow.
5. Navigate to Red Hat Hybrid Cloud Console > Settings > Notifications.
6. Select Notifications, and then select Red Hat Enterprise Linux.
7. Click Create new group. The Create new behavior group dialog box appears.
8. Type the name of the new behavior group in the Name field and click Next.
9. For Actions, select Integration: ServiceNow from the drop-down list.
10. For Recipient, select the integration for ServiceNow that you created earlier (for example, ServiceNow integration).
11. Click Next. The Associate event types screen appears.

12. Select the following event types from the list:

    • Advisor new recommendation
    • New vulnerability with CVSS >= 7.0
    • New vulnerability with Critical Severity
    • New vulnerability containing Security rule
    • Any vulnerability with known exploit
13. Click Next, and then click Finish to complete the setup process.

Procedure

1. In the Slack application, navigate to the channel or user name to receive the notifications.
2. Click the channel name at the top of the screen. The configuration window appears.
3. Select Integrations, and then click Manage Apps. The Add apps to channel window appears.
4. Search for Incoming Webhooks, and then select it from the search results.
5. Click Add to Slack to add the Insights integration to the channel. The Post to Channel box appears.

6. Click the Choose a Channel drop-down menu to select an existing channel, or type the user or channel name in the field. To create a new channel, click or create a new channel, and then type the name of the new channel and an optional description. Click Create.

   Note

   The field requires a channel name. If you do not specify a channel, Slack integration uses #general.

   Note

   If you do not have App Manager permissions to add the app to the channel, click the Request Configuration button to send an add request to the App Manager for the channel.

7. Click Add Incoming Webhooks Integration. The Configuration page for the app appears in the Slack app directory.

   

   

8. Scroll down to Integration Settings. The generated Webhook URL appears in the Webhook URL field.
9. Copy the URL displayed in the field. You will use it to set up the integration in the Red Hat Hybrid Cloud Console.
10. Optional. Add a name for the integration in the Customize Name field.
11. Optional. Upload an icon in the Customize Icon field.
12. Click Save Settings.

Procedure

1. Navigate to the Red Hat Hybrid Cloud Console.
2. Click the gear icon to select Settings, and then select Integrations from the menu on the left side of the screen.
3. Click Add Integration.
4. Create a name for the integration (for example, SLACK_INTEGRATION).

5. Click the Type drop-down menu and select Slack.

   

6. Paste the URL that you copied from the Webhook URL field during Slack side setup into the Endpoint URL field.
7. Add the name of the Slack channel configured during Slack side setup to the Channel field.
8. Click Save. The Last Connection Attempt state takes a few minutes to process the change.
9. Navigate to Notifications > Red Hat Enterprise Linux.
10. Navigate to Behavior Groups to add the new endpoint to an existing behavior group, or to create a new behavior group. For more information about creating behavior groups, see Configure notification behavior groups.
11. Click Edit Behavior Group.

12. Select Integration: Slack in the Actions column.

    

13. The list of configured Slack integrations shows in the Recipient drop-down list. Select the integration name that you previously created.

    

14. Click Next. The Associate event types screen appears.
15. Select the event types for which you want notifications.
16. When you have finished selecting event types, click Next. The Review screen appears.

17. Review the settings for the behavior group and then click Finish.

    Note

    You can create and edit multiple behavior groups to include any additional platforms that the Notifications service supports.

18. Return to Settings > Integrations. When the Slack integration is ready to send events to Slack, the Last connection attempt column shows Ready. If the notification reached Slack successfully, the Last connection attempt column shows Success.

    

Procedure

1. Navigate to Red Hat Hybrid Cloud Console > Settings > Notifications > Event log.
2. Filter the events list as needed by event, application, or application bundle and select to show events from today, yesterday, the last seven days, the last 14 days (default), or set a custom range within the last 14 days.
3. Sort the Date and time column as needed in ascending or descending order.
4. If users of the application bundle are not receiving the notifications as intended, you can click View notification settings and change settings and/or have users check their user preferences for receiving email notifications.