[BUG] Doc level monitor dryrun results in [alerting_exception] routing is required for [.opendistro-alerting-alerts]
error.
#1295
Labels
bug
Something isn't working
What is the bug?
The alerting frontend allows users to send a test message to the notification channel configured for an action. The test message button is not working in alerting v2.7 and up. We will need to verify older versions as well; I would recommend we start checking in v2.3 as that's the version just before changes were implemented to the alerting plugin to support Security Analytics in v2.4.
This seems to relate to the
_routing
mapping in the alert_mapping.json. Because the monitor doesn't exist, there may be an issue associating it with any findings/alerts generated during the dry run. Creating the monitor, and pressing theSend test message
button on the edit page results in the same error, though.After creating the monitor notifications are sent as expected during the regular monitor executions.
How can one reproduce the bug?
Steps to reproduce the behavior:
Per document monitor
optionAdditional context
section belowSend test message
buttondoes not
result in a finding, a toast will popup claiming that the notification was sent to the channel; but a notification isn't actually sent.What is the expected behavior?
A test notification should be sent to the selected channel with a preview of the message content.
What is your host/environment?
Do you have any additional context?
This is an example command that can be used to create an index and documents for testing the monitor.
This is an example monitor JSON payload that's configured to generate findings when using the sample document above.
The text was updated successfully, but these errors were encountered: