socfortress / CoPilot

SOCFortress CoPilot
https://www.socfortress.co
GNU Affero General Public License v3.0
193 stars 40 forks source link

Alert fowarding not work #221

Closed roomme13 closed 4 months ago

roomme13 commented 4 months ago

Describe the bug Alert forwarding not work when test from graylog, get bad request 400 when try to test it

To Reproduce Test notification "SEND TO COPILOT" in graylog

Expected behavior able to forward alert from graylog to copilot

image

taylorwalton commented 4 months ago

Hey @roomme13 - this is expected when trying to do a manual test via Graylog. Unfortunately, Graylog defaults to only being able to send a GET request when running a connection test, while the api/monitoring_alert/create endpoint only accepts POST requests. When Graylog actually sends an alert to CoPilot it does send a POST request which the API endpoint within Copilot then accepts. However, if you are seeing issues with this, then please open another issue and let me know