Trigger Alerts

Abnormal traffic patterns or errors in API usage can indicate problems or malicious attacks. By setting up alerts for certain thresholds and activities, you can quickly detect and gain insights into patterns that might indicate a security breach, abuse, or abnormal usage.

This tutorial guides you through setting up an alert policy to notify you when a gateway instance goes offline. The policy will call a webhook to notify relevant parties if a gateway instance goes offline within the last 10 minutes.

Prerequisites

1. Install API7 Enterprise.
2. Have a running API on the gateway group.
3. Get the webhook URL of your notification system.

Add a Webhook Template

Each alert policy requires at least one webhook template for notifications. A webhook template defines the content and structure of data sent via webhook when an event occurs. Multiple policies can share the same webhook templates.

Webhooks are a way for different applications or services to communicate with each other in real-time by sending HTTP requests to a predefined URL when certain events happen.

1. Select Alert from the side navigation bar, then click Webhook Templates.

2. Click Add Template.

3. Use Email-notice as the template name, and your webhook URL as the URL. This tutorial uses a webhook.site URL as an example.

4. In the Notification Template field (request body of the webhook), apply the following configurations. The Title, Severity and Detail fields come from the alert policy:

   hello, here is an alert example. 
   Title: {{ .Title }} 
   AlertTime: {{ .AlertTime.Format "2006 Jan 02 15:04:05" }} 
   Severity: {{.Severity}} 
   Detail: {{.Detail}}

5. Click Add.

Add an Alert Policy

An alert policy is a predefined set of conditions and rules that are configured to trigger specific actions or notifications when certain events or conditions occur.

1. Select Alert from the side navigation bar, then click Policies.
2. Click Add Policy.
3. Enter the policy name. This tutorial will use gateway-instance-offline as an example.
4. Click Add.
5. Click the newly created alert policy.
6. On Trigger Conditions, click Update.
7. Choose gateway instance offline as condition 1, then choose 5 minutes.
8. Click Update.
9. On Basics, click Update and then apply the following configuration:

• Alert Title: API7 Gateway Instance Offline
• Alert Detail: Please check the instance and recover it immediately

10. Click Update.
11. On Webhook Notifications, click Enable to enable the Email-notice template.

Validate

Manually stop a gateway instance and you should see the following output:

hello, here is an alert example. 
Title: API7 Gateway Instance Offline 
AlertTime: 2006 Jan 02 15:04:05"
Severity: Medium 
Detail: Please check the instance and recover immediately