Merge pull request #136 from JupiterOne/KNO-515

add jupiterone-integration-failures-misconfigurations
JupiterOne · Jan 7, 2025 · e2264b6 · e2264b6
2 parents 340498e + d6a3fc7
commit e2264b6
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 3 deletions.
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@jupiterone/jupiterone-alert-rules",
-  "version": "0.37.0",
+  "version": "0.38.0",
   "description": "Alert rule packages for the JupiterOne platform",
   "scripts": {
     "validate": "tsx ./scripts/validate.ts"
@@ -19,4 +19,4 @@
     "tsx": "^4.7.0",
     "typescript": "^5.3.3"
   }
-}
+}
diff --git a/rule-packs/integration-monitoring.json b/rule-packs/integration-monitoring.json
@@ -14,5 +14,21 @@
       "emailBody": "({{itemIndex+1}} of {{itemCount}}) <br><b>{{item.displayName}}</b><br>---<br><b>Integration:</b>{{item.integrationType}}<br><b>InstanceId:</b> {{item.id}}<br><b>Status:</b> {{item.status}}<br><b>PollingInterval:</b> {{item.pollingInterval}}<br><b>URL:</b> https://apps.us.jupiterone.io/integrations/{{item.integrationType}}/{{item.id}}/jobs<br><br>",
       "slackBody": "({{itemIndex+1}} of {{itemCount}}) \n*{{item.displayName}}*\n---\n*Integration:* {{item.integrationType}}\n*InstanceId:* {{item.id}}\n*Status:* {{item.status}}\n *PollingInterval:* {{item.pollingInterval}}\n *URL:* https://apps.us.jupiterone.io/integrations/{{item.integrationType}}/{{item.id}}/jobs \n\n"
     }
+  },
+  {
+    "name": "jupiterone-integration-failures-misconfigurations",
+    "description": "JupiterOne Integrations currently in a 'FAILED' or 'CONFIGURATION_FAILURE' status with a defined Polling Interval",
+    "queries": [
+      {
+        "name": "query0",
+        "query": "FIND jupiterone_integration WITH status = ('FAILED' or 'CONFIGURATION_FAILURE') AND pollingInterval != 'DISABLED'",
+        "version": "v1"
+      }
+    ],
+    "alertLevel": "INFO",
+    "templates": {
+      "emailBody": "({{itemIndex+1}} of {{itemCount}}) <br><b>{{item.displayName}}</b><br>---<br><b>Integration:</b>{{item.integrationType}}<br><b>InstanceId:</b> {{item.id}}<br><b>Status:</b> {{item.status}}<br><b>PollingInterval:</b> {{item.pollingInterval}}<br><b>URL:</b> https://apps.us.jupiterone.io/integrations/{{item.integrationType}}/{{item.id}}/jobs<br><br>",
+      "slackBody": "({{itemIndex+1}} of {{itemCount}}) \n*{{item.displayName}}*\n---\n*Integration:* {{item.integrationType}}\n*InstanceId:* {{item.id}}\n*Status:* {{item.status}}\n *PollingInterval:* {{item.pollingInterval}}\n *URL:* https://apps.us.jupiterone.io/integrations/{{item.integrationType}}/{{item.id}}/jobs \n\n"
+    }
   }
-]
+]