Open pmuellr opened 1 month ago
Pinging @elastic/response-ops (Team:ResponseOps)
Not sure if there are other connectors, or perhaps rules, that would also benefit from this sort of ease-of-use, but I'd think anything expecting a non-trivial amount of JSON might be a candidate.
A while back for the Slack connector, we started supporting using Blockkit to create messages, rather than just the usual single
Mrkdown
formatted string.Here's an example in JSON, that might be used for a recovered alert:
Kinda wordy / noisy as all JSON tends to be. We could make this a little easier by supporting YAML and/or Hjson:
yaml:
Hjson: