openapi: 3.0.3
info:
  title: BigPanda Alert Ingestion (OIM) API
  description: BigPanda Alert Ingestion (OIM) operations, assembled verbatim from the OpenAPI fragments BigPanda publishes
    on its own API reference at https://api-docs.bigpanda.io/. Each operation carries x-source-url naming the exact provider
    page it was read from. BigPanda hosts each organization in a single data management region (US or EU); send requests to
    the base URL for your region.
  version: 1.0.0
  contact:
    name: BigPanda Support
    url: https://api-docs.bigpanda.io/
  license:
    name: Proprietary
    url: https://www.bigpanda.io/legal/
  x-provenance:
    method: searched
    source: https://api-docs.bigpanda.io/llms.txt
    harvested: '2026-09-04'
    assembly: 'Operations copied verbatim from the per-endpoint OpenAPI 3.0.1 fragments BigPanda publishes at https://api-docs.bigpanda.io/<endpoint>.md.
      Assembly-only normalizations: Apidog x-apidog security metadata stripped, securityScheme type "bearer" corrected to
      type http/scheme bearer, schema name collisions suffixed. No operation, parameter, schema or response was authored by
      API Evangelist.'
    operations: 26
servers:
- url: https://api.bigpanda.io
  description: US Region
- url: https://api.eu.bigpanda.io
  description: EU Region
tags:
- name: Alert Ingestion (OIM)
paths:
  /oim/{integration}/alerts:
    post:
      summary: Add an alert payload for OIM normalization and processing
      deprecated: false
      description: Add an alert payload for OIM normalization and processing
      operationId: ingestAlert
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: integration
        in: path
        description: ''
        required: true
        example: ''
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties: {}
              x-apidog-orders: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: created
          content:
            application/json:
              schema:
                type: object
                properties: {}
                x-apidog-orders: []
          headers: {}
          x-apidog-name: ''
        '400':
          x-apidog-ordering: 1
          description: Bad request
          content:
            application/json:
              schema:
                type: object
                properties: {}
                x-apidog-orders: []
          headers: {}
          x-apidog-name: ''
        '401':
          x-apidog-ordering: 2
          description: Unauthorized
          headers: {}
          x-apidog-name: ''
        '404':
          x-apidog-ordering: 3
          description: Not found
          content:
            application/json:
              schema:
                type: object
                properties: {}
                x-apidog-orders: []
          headers: {}
          x-apidog-name: ''
        '429':
          x-apidog-ordering: 4
          description: ''
          headers: {}
          x-apidog-name: ''
        '500':
          x-apidog-ordering: 5
          description: Internal server error
          content:
            application/json:
              schema:
                type: object
                properties: {}
                x-apidog-orders: []
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770217-run
      x-source-url: https://api-docs.bigpanda.io/add-an-alert-payload-for-oim-normalization-and-processing-37770217e0.md
      x-source-page: Add an alert payload for OIM normalization and processing
  /oim/appdynamicsapi_v3/alerts:
    post:
      summary: AppDynamics
      deprecated: false
      description: Reference payload for AppDynamics. Shows the well-formed OIM alert payload shape for a AppDynamics source
        — send it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing AppDynamics integration in BigPanda; the payload normalizes through that integration's parsing
        rules.
      operationId: postOimAppdynamicsapiV3Alerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {ORG_BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                clamp_limit:
                  type: integer
                notes:
                  type: string
                clamped:
                  type: boolean
                policy_id:
                  type: string
                  format: utc-millisec
                action_trigger_time:
                  type: string
                  format: style
                from_web_hook:
                  type: boolean
                full_events_list:
                  type: array
                  items:
                    type: object
                    properties:
                      severity:
                        type: string
                      deep_link_url:
                        type: string
                        format: uri
                      summary_message:
                        type: string
                      APPLICATION_id:
                        type: string
                        format: utc-millisec
                      APPLICATION_COMPONENT_NODE_id:
                        type: string
                        format: utc-millisec
                      APPLICATION_name:
                        type: string
                      display_name:
                        type: string
                      title:
                        type: string
                        format: style
                      bt_performance_event:
                        type: boolean
                      APPLICATION_COMPONENT_id:
                        type: string
                        format: utc-millisec
                      app_name:
                        type: string
                      event_type:
                        type: string
                      appd_event_type:
                        type: string
                      APPLICATION_COMPONENT_name:
                        type: string
                      guid:
                        type: string
                      affected_entities:
                        type: array
                        items:
                          type: object
                          properties:
                            name:
                              type: string
                            type:
                              type: string
                            id:
                              type: integer
                          x-apidog-orders:
                          - name
                          - type
                          - id
                          x-apidog-ignore-properties: []
                      event_message:
                        type: string
                      tag:
                        type: string
                      app_id:
                        type: integer
                      event_type_key:
                        type: string
                      event_time:
                        type: string
                        format: style
                      APPLICATION_COMPONENT_NODE_name:
                        type: string
                      event_type_severity:
                        type: string
                      object:
                        type: string
                    x-apidog-orders:
                    - severity
                    - deep_link_url
                    - summary_message
                    - APPLICATION_id
                    - APPLICATION_COMPONENT_NODE_id
                    - APPLICATION_name
                    - display_name
                    - title
                    - bt_performance_event
                    - APPLICATION_COMPONENT_id
                    - app_name
                    - event_type
                    - appd_event_type
                    - APPLICATION_COMPONENT_name
                    - guid
                    - affected_entities
                    - event_message
                    - tag
                    - app_id
                    - event_type_key
                    - event_time
                    - APPLICATION_COMPONENT_NODE_name
                    - event_type_severity
                    - object
                    x-apidog-ignore-properties: []
                policy_name:
                  type: string
                account_id:
                  type: string
                  format: utc-millisec
                action_id:
                  type: string
                  format: color
                account_name:
                  type: string
                action_name:
                  type: string
                controller_link_url:
                  type: string
                  format: uri
                policy_digest:
                  type: boolean
              x-apidog-orders:
              - clamp_limit
              - notes
              - clamped
              - policy_id
              - action_trigger_time
              - from_web_hook
              - full_events_list
              - policy_name
              - account_id
              - action_id
              - account_name
              - action_name
              - controller_link_url
              - policy_digest
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770232-run
      x-source-url: https://api-docs.bigpanda.io/appdynamics-37770232e0.md
      x-source-page: AppDynamics
  /oim/azure_monitor_v2/alerts:
    post:
      summary: Azure
      deprecated: false
      description: Reference payload for Azure Monitor. Shows the well-formed OIM alert payload shape for a Azure Monitor
        source — send it against a test integration's app key to validate the pipeline end to end before connecting production
        traffic. Requires an existing Azure Monitor integration in BigPanda; the payload normalizes through that integration's
        parsing rules.
      operationId: postOimAzureMonitorV2Alerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{access_token}'
        schema:
          type: string
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{app_key}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {ORG_BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                data:
                  type: object
                  properties:
                    essentials:
                      type: object
                      properties:
                        severity:
                          type: string
                        monitorCondition:
                          type: string
                        monitoringService:
                          type: string
                        description:
                          type: string
                        alertRule:
                          type: string
                        originAlertId:
                          type: string
                        essentialsVersion:
                          type: string
                          format: utc-millisec
                        alertContextVersion:
                          type: string
                          format: utc-millisec
                        alertTargetIDs:
                          type: array
                          items:
                            type: string
                        configurationItems:
                          type: array
                          items:
                            type: string
                        signalType:
                          type: string
                        firedDateTime:
                          type: string
                          format: date-time
                        alertId:
                          type: string
                      x-apidog-orders:
                      - severity
                      - monitorCondition
                      - monitoringService
                      - description
                      - alertRule
                      - originAlertId
                      - essentialsVersion
                      - alertContextVersion
                      - alertTargetIDs
                      - configurationItems
                      - signalType
                      - firedDateTime
                      - alertId
                      x-apidog-ignore-properties: []
                    alertContext:
                      type: object
                      properties:
                        eventDataId:
                          type: string
                        level:
                          type: string
                        eventSource:
                          type: string
                        Activity Log Event Description:
                          type: string
                        operationName:
                          type: string
                        subStatus:
                          type: string
                        submissionTimestamp:
                          type: string
                          format: date-time
                        authorization:
                          type: object
                          properties:
                            action:
                              type: string
                            scope:
                              type: string
                          x-apidog-orders:
                          - action
                          - scope
                          x-apidog-ignore-properties: []
                        caller:
                          type: string
                          format: email
                        channels:
                          type: string
                        claims:
                          type: string
                          format: style
                        operationId:
                          type: string
                        correlationId:
                          type: string
                        properties:
                          type: object
                          properties:
                            eventCategory:
                              type: string
                            message:
                              type: string
                            entity:
                              type: string
                            hierarchy:
                              type: string
                          x-apidog-orders:
                          - eventCategory
                          - message
                          - entity
                          - hierarchy
                          x-apidog-ignore-properties: []
                        eventTimestamp:
                          type: string
                          format: date-time
                        status:
                          type: string
                      x-apidog-orders:
                      - eventDataId
                      - level
                      - eventSource
                      - Activity Log Event Description
                      - operationName
                      - subStatus
                      - submissionTimestamp
                      - authorization
                      - caller
                      - channels
                      - claims
                      - operationId
                      - correlationId
                      - properties
                      - eventTimestamp
                      - status
                      x-apidog-ignore-properties: []
                    customProperties:
                      type: object
                      x-apidog-orders: []
                      properties: {}
                      x-apidog-ignore-properties: []
                  x-apidog-orders:
                  - essentials
                  - alertContext
                  - customProperties
                  x-apidog-ignore-properties: []
                schemaId:
                  type: string
              x-apidog-orders:
              - data
              - schemaId
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770239-run
      x-source-url: https://api-docs.bigpanda.io/azure-37770239e0.md
      x-source-page: Azure
  /oim/meraki/alerts:
    post:
      summary: Cisco Meraki
      deprecated: false
      description: Reference payload for Cisco Meraki. Shows the well-formed OIM alert payload shape for a Cisco Meraki source
        — send it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing Cisco Meraki integration in BigPanda; the payload normalizes through that integration's parsing
        rules.
      operationId: postOimMerakiAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                deviceTags:
                  type: array
                  items:
                    type: string
                alertTypeId:
                  type: string
                occurredAt:
                  type: string
                  format: date-time
                alertType:
                  type: string
                organizationName:
                  type: string
                networkName:
                  type: string
                alertLevel:
                  type: string
                sentAt:
                  type: string
                alertData:
                  type: object
                  properties:
                    peerNetworkName:
                      type: string
                    vap:
                      type: string
                      format: utc-millisec
                    connectivity:
                      type: string
                    vpnType:
                      type: string
                    peerNetworkId:
                      type: string
                    onSecondary:
                      type: boolean
                    peerNetworkUrl:
                      type: string
                      format: uri
                    secondaryEndpoint:
                      type: string
                      format: ip-address
                    primaryEndpoint:
                      type: string
                      format: ip-address
                  x-apidog-orders:
                  - peerNetworkName
                  - vap
                  - connectivity
                  - vpnType
                  - peerNetworkId
                  - onSecondary
                  - peerNetworkUrl
                  - secondaryEndpoint
                  - primaryEndpoint
                  x-apidog-ignore-properties: []
                organizationUrl:
                  type: string
                  format: uri
                version:
                  type: string
                deviceName:
                  type: string
                organizationId:
                  type: string
                deviceSerial:
                  type: string
                networkTags:
                  type: array
                  items:
                    type: string
                deviceMac:
                  type: string
                  format: style
                deviceUrl:
                  type: string
                  format: uri
                networkId:
                  type: string
                deviceModel:
                  type: string
                alertId:
                  type: string
                sharedSecret:
                  type: string
                networkUrl:
                  type: string
                  format: uri
              x-apidog-orders:
              - deviceTags
              - alertTypeId
              - occurredAt
              - alertType
              - organizationName
              - networkName
              - alertLevel
              - sentAt
              - alertData
              - organizationUrl
              - version
              - deviceName
              - organizationId
              - deviceSerial
              - networkTags
              - deviceMac
              - deviceUrl
              - networkId
              - deviceModel
              - alertId
              - sharedSecret
              - networkUrl
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770233-run
      x-source-url: https://api-docs.bigpanda.io/cisco-meraki-37770233e0.md
      x-source-page: Cisco Meraki
  /oim/cloudwatch/alerts:
    post:
      summary: CloudWatch
      deprecated: false
      description: Reference payload for Amazon CloudWatch. Shows the well-formed OIM alert payload shape for a Amazon CloudWatch
        source — send it against a test integration's app key to validate the pipeline end to end before connecting production
        traffic. Requires an existing Amazon CloudWatch integration in BigPanda; the payload normalizes through that integration's
        parsing rules.
      operationId: postOimCloudwatchAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                updateDate:
                  type: string
                cancelDate:
                  type: string
                resourceId:
                  type: string
                criticality:
                  type: string
                incident_identifier:
                  type: string
                Risk:
                  type: string
                  format: utc-millisec
                type:
                  type: string
                recommendations:
                  type: string
                resourceKind:
                  type: string
                alertName:
                  type: string
                Efficiency:
                  type: string
                  format: utc-millisec
                alertId:
                  type: string
                __status:
                  type: string
                timestamp:
                  type: integer
                adapterKind:
                  type: string
                Health:
                  type: string
                  format: utc-millisec
                secondary_property:
                  type: string
                impact:
                  type: string
                resourceName:
                  type: string
                primary_property:
                  type: string
                subType:
                  type: string
                alertURL:
                  type: string
                  format: uri
                startDate:
                  type: string
                status:
                  type: string
              x-apidog-orders:
              - updateDate
              - cancelDate
              - resourceId
              - criticality
              - incident_identifier
              - Risk
              - type
              - recommendations
              - resourceKind
              - alertName
              - Efficiency
              - alertId
              - __status
              - timestamp
              - adapterKind
              - Health
              - secondary_property
              - impact
              - resourceName
              - primary_property
              - subType
              - alertURL
              - startDate
              - status
              x--orders:
              - updateDate
              - cancelDate
              - resourceId
              - criticality
              - incident_identifier
              - Risk
              - type
              - recommendations
              - resourceKind
              - alertName
              - Efficiency
              - alertId
              - __status
              - timestamp
              - adapterKind
              - Health
              - secondary_property
              - impact
              - resourceName
              - primary_property
              - subType
              - alertURL
              - startDate
              - status
              x--ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response2'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770234-run
      x-source-url: https://api-docs.bigpanda.io/cloudwatch-37770234e0.md
      x-source-page: CloudWatch
  /oim/cribl/alerts:
    post:
      summary: Cribl
      deprecated: false
      description: Reference payload for Cribl. Shows the well-formed OIM alert payload shape for a Cribl source — send it
        against a test integration's app key to validate the pipeline end to end before connecting production traffic. Requires
        an existing Cribl integration in BigPanda; the payload normalizes through that integration's parsing rules.
      operationId: postOimCriblAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: array
              items:
                type: object
                properties:
                  cluster:
                    type: string
                  host:
                    type: string
                  description:
                    type: string
                  check:
                    type: string
                  my_unique_attribute:
                    type: string
                  status:
                    type: string
                  timestamp:
                    type: integer
                x-apidog-orders:
                - cluster
                - host
                - description
                - check
                - my_unique_attribute
                - status
                - timestamp
                x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770235-run
      x-source-url: https://api-docs.bigpanda.io/cribl-37770235e0.md
      x-source-page: Cribl
  /oim/datadog_v2/alerts:
    post:
      summary: DataDog
      deprecated: false
      description: Reference payload for Datadog. Shows the well-formed OIM alert payload shape for a Datadog source — send
        it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing Datadog integration in BigPanda; the payload normalizes through that integration's parsing rules.
      operationId: postOimDatadogV2Alerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{app_key}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {ORG_BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                date:
                  type: string
                  format: utc-millisec
                automatic-restart:
                  type: string
                internal-hostname:
                  type: string
                project:
                  type: string
                body:
                  type: string
                  format: style
                alert_metric:
                  type: object
                  x-apidog-orders: []
                  properties: {}
                  x-apidog-ignore-properties: []
                event_type:
                  type: string
                sanitizeMarkdown_replace_body:
                  type: string
                  format: style
                zone:
                  type: string
                host:
                  type: array
                  items:
                    type: string
                kube_cluster_name:
                  type: string
                datadog_app:
                  type: string
                id:
                  type: string
                  format: utc-millisec
                cluster-uid:
                  type: string
                last_updated:
                  type: string
                  format: utc-millisec
                user_email:
                  type: object
                  x-apidog-orders: []
                  properties: {}
                  x-apidog-ignore-properties: []
                instance-template:
                  type: string
                instance-type:
                  type: string
                priority:
                  type: string
                tags:
                  type: array
                  items:
                    type: string
                    format: uri
                alert_status:
                  type: string
                gci-metrics-enabled:
                  type: string
                name:
                  type: string
                region:
                  type: string
                aggreg_key:
                  type: string
                  format: style
                replace_body:
                  type: string
                  format: style
                status:
                  type: string
                purpose:
                  type: string
                link:
                  type: string
                  format: uri
                description:
                  type: string
                datadog_demo_keep:
                  type: string
                title:
                  type: string
                  format: style
                alert_transition:
                  type: string
                gci-ensure-gke-docker:
                  type: string
                numeric_project_id:
                  type: array
                  items:
                    type: string
                    format: utc-millisec
                datadog_org_id:
                  type: string
                  format: utc-millisec
                cluster-location:
                  type: string
                cluster_name:
                  type: array
                  items:
                    type: string
                alert_query:
                  type: string
                  format: style
                creator:
                  type: string
                instance-id:
                  type: string
                  format: utc-millisec
                kube-labels:
                  type: string
                on-host-maintenance:
                  type: string
                google-compute-enable-pcid:
                  type: string
                cloud_provider:
                  type: string
                env:
                  type: string
                availability-zone:
                  type: string
                gci-update-strategy:
                  type: string
                created-by:
                  type: string
              x-apidog-orders:
              - date
              - automatic-restart
              - internal-hostname
              - project
              - body
              - alert_metric
              - event_type
              - sanitizeMarkdown_replace_body
              - zone
              - host
              - kube_cluster_name
              - datadog_app
              - id
              - cluster-uid
              - last_updated
              - user_email
              - instance-template
              - instance-type
              - priority
              - tags
              - alert_status
              - gci-metrics-enabled
              - name
              - region
              - aggreg_key
              - replace_body
              - status
              - purpose
              - link
              - description
              - datadog_demo_keep
              - title
              - alert_transition
              - gci-ensure-gke-docker
              - numeric_project_id
              - datadog_org_id
              - cluster-location
              - cluster_name
              - alert_query
              - creator
              - instance-id
              - kube-labels
              - on-host-maintenance
              - google-compute-enable-pcid
              - cloud_provider
              - env
              - availability-zone
              - gci-update-strategy
              - created-by
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770238-run
      x-source-url: https://api-docs.bigpanda.io/datadog-37770238e0.md
      x-source-page: DataDog
  /oim/dynatrace_v2/alerts:
    post:
      summary: Dynatrace
      deprecated: false
      description: Reference payload for Dynatrace. Shows the well-formed OIM alert payload shape for a Dynatrace source —
        send it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing Dynatrace integration in BigPanda; the payload normalizes through that integration's parsing
        rules.
      operationId: postOimDynatraceV2Alerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{access_token}'
        schema:
          type: string
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{app_key}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {x-auth-token}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                app_key:
                  type: string
                ProblemID:
                  type: string
                ProblemTitle:
                  type: string
                ProblemImpact:
                  type: string
                ImpactedEntity:
                  type: string
                State:
                  type: string
                ProblemDetailsJSON:
                  type: object
                  properties:
                    tagsOfAffectedEntities:
                      type: array
                      items:
                        type: object
                        properties:
                          context:
                            type: string
                          value:
                            type: string
                          key:
                            type: string
                        x-apidog-orders:
                        - context
                        - value
                        - key
                        x-apidog-ignore-properties: []
                    displayName:
                      type: string
                    commentCount:
                      type: integer
                    affectedCounts:
                      type: object
                      properties:
                        INFRASTRUCTURE:
                          type: integer
                        SERVICE:
                          type: integer
                        APPLICATION:
                          type: integer
                        ENVIRONMENT:
                          type: integer
                      x-apidog-orders:
                      - INFRASTRUCTURE
                      - SERVICE
                      - APPLICATION
                      - ENVIRONMENT
                      x-apidog-ignore-properties: []
                    hasRootCause:
                      type: boolean
                    impactLevel:
                      type: string
                    severityLevel:
                      type: string
                    rankedImpacts:
                      type: array
                      items:
                        type: object
                        properties:
                          impactLevel:
                            type: string
                          severityLevel:
                            type: string
                          entityId:
                            type: string
                          eventType:
                            type: string
                          entityName:
                            type: string
                        x-apidog-orders:
                        - impactLevel
                        - severityLevel
                        - entityId
                        - eventType
                        - entityName
                        x-apidog-ignore-properties: []
                    recoveredCounts:
                      type: object
                      properties:
                        INFRASTRUCTURE:
                          type: integer
                        SERVICE:
                          type: integer
                        APPLICATION:
                          type: integer
                        ENVIRONMENT:
                          type: integer
                      x-apidog-orders:
                      - INFRASTRUCTURE
                      - SERVICE
                      - APPLICATION
                      - ENVIRONMENT
                      x-apidog-ignore-properties: []
                    startTime:
                      type: integer
                    id:
                      type: string
                    endTime:
                      type: integer
                    rankedEvents:
                      type: array
                      items:
                        type: object
                        properties:
                          impactLevel:
                            type: string
                          isRootCause:
                            type: boolean
                          severityLevel:
                            type: string
                          entityName:
                            type: string
                          annotationDescription:
                            type: string
                          startTime:
                            type: integer
                          entityId:
                            type: string
                          correlationId:
                            type: string
                          endTime:
                            type: integer
                          eventType:
                            type: string
                          status:
                            type: string
                          severities:
                            type: array
                            items:
                              type: string
                        x-apidog-orders:
                        - impactLevel
                        - isRootCause
                        - severityLevel
                        - entityName
                        - annotationDescription
                        - startTime
                        - entityId
                        - correlationId
                        - endTime
                        - eventType
                        - status
                        - severities
                        x-apidog-ignore-properties: []
                    status:
                      type: string
                  x-apidog-orders:
                  - tagsOfAffectedEntities
                  - displayName
                  - commentCount
                  - affectedCounts
                  - hasRootCause
                  - impactLevel
                  - severityLevel
                  - rankedImpacts
                  - recoveredCounts
                  - startTime
                  - id
                  - endTime
                  - rankedEvents
                  - status
                  x-apidog-ignore-properties: []
                PID:
                  type: string
                ProblemDetails:
                  type: string
                Tags:
                  type: string
                  format: style
                ProblemURL:
                  type: string
                  format: uri
              x-apidog-orders:
              - app_key
              - ProblemID
              - ProblemTitle
              - ProblemImpact
              - ImpactedEntity
              - State
              - ProblemDetailsJSON
              - PID
              - ProblemDetails
              - Tags
              - ProblemURL
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770230-run
      x-source-url: https://api-docs.bigpanda.io/dynatrace-37770230e0.md
      x-source-page: Dynatrace
  /oim/entuity/alerts:
    post:
      summary: Entuity
      deprecated: false
      description: Reference payload for Entuity. Shows the well-formed OIM alert payload shape for a Entuity source — send
        it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing Entuity integration in BigPanda; the payload normalizes through that integration's parsing rules.
      operationId: postOimEntuityAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                incident_type:
                  type: integer
                sourceDescriptor_externalId:
                  type: object
                  x-apidog-orders: []
                  properties: {}
                  x-apidog-ignore-properties: []
                incident_sourceHostAndPort:
                  type: string
                  format: uri
                incident_lastClosedBy:
                  type: object
                  x-apidog-orders: []
                  properties: {}
                  x-apidog-ignore-properties: []
                actor_name:
                  type: string
                incident_sourceSwType:
                  type: string
                incident_contextEvent:
                  type: object
                  x-apidog-orders: []
                  properties: {}
                  x-apidog-ignore-properties: []
                actor_ageOutMs:
                  type: integer
                incident_annotatedMs:
                  type: integer
                incident_incident:
                  type: boolean
                sourceDescriptor_containerDeviceId:
                  type: integer
                sourceDescriptor_containerPortId:
                  type: integer
                incident_id:
                  type: integer
                incident_sourceZoneID:
                  type: integer
                incident_contributors:
                  type: array
                  items:
                    type: string
                incident_reason:
                  type: string
                  format: style
                id:
                  type: string
                incident_consolidatedSourceHostAndPort:
                  type: string
                  format: uri
                sourceDescriptor_classicType:
                  type: integer
                sourceDescriptor_zoneID:
                  type: integer
                incident_stateOpen:
                  type: boolean
                incident_sourceCompIdString:
                  type: string
                sourceDescriptor_swType:
                  type: string
                incident_sourceZoneName:
                  type: string
                sourceDescriptor_missingEyeServerId:
                  type: boolean
                incident_events:
                  type: array
                  items:
                    type: string
                incident_severity:
                  type: integer
                incident_firstOpenedMs:
                  type: integer
                sourceDescriptor_deviceId:
                  type: integer
                sourceDescriptor_classicId0:
                  type: integer
                sourceDescriptor_classicId1:
                  type: integer
                actor_id:
                  type: string
                incident_assignedMs:
                  type: integer
                sourceDescriptor_objectName:
                  type: object
                  x-apidog-orders: []
                  properties: {}
                  x-apidog-ignore-properties: []
                sourceDescriptor_name:
                  type: string
                incident_lastOpenedMs:
                  type: integer
                sourceDescriptor_eyeServerIdString:
                  type: string
                incident_sourceExternalId:
                  type: object
                  x-apidog-orders: []
                  properties: {}
                  x-apidog-ignore-properties: []
                incident_lastUpdatedMs:
                  type: integer
                incident_lastClosedMs:
                  type: integer
                incident_sourceSwId:
                  type: integer
                sourceDescriptor_containerDeviceSwId:
                  type: integer
                incident_state:
                  type: integer
                incident_name:
                  type: string
                incidentClosed:
                  type: boolean
                sourceDescriptor_swId:
                  type: integer
                incident_annotatedBy:
                  type: object
                  x-apidog-orders: []
                  properties: {}
                  x-apidog-ignore-properties: []
                entuity_url:
                  type: string
                  format: uri
                incident_impactDescr:
                  type: string
                sourceDescriptor_zoneName:
                  type: string
                incident_sourceServerId:
                  type: string
                actor_type:
                  type: integer
                incident_sourceName:
                  type: string
                incident_sourceContainerName:
                  type: string
                incident_assignedTo:
                  type: object
                  x-apidog-orders: []
                  properties: {}
                  x-apidog-ignore-properties: []
                incident_components:
                  type: array
                  items:
                    type: string
                sourceDescriptor_eyeServerId:
                  type: string
                incident_shortHostname:
                  type: string
                sourceDescriptor_containerName:
                  type: string
                actor_reopeningWindowMs:
                  type: integer
                sourceDescriptor_classicPortId:
                  type: integer
                sourceDescriptor_classicViewId:
                  type: integer
                incident_annotation:
                  type: object
                  x-apidog-orders: []
                  properties: {}
                  x-apidog-ignore-properties: []
                sourceDescriptor_classicDeviceId:
                  type: integer
              x-apidog-orders:
              - incident_type
              - sourceDescriptor_externalId
              - incident_sourceHostAndPort
              - incident_lastClosedBy
              - actor_name
              - incident_sourceSwType
              - incident_contextEvent
              - actor_ageOutMs
              - incident_annotatedMs
              - incident_incident
              - sourceDescriptor_containerDeviceId
              - sourceDescriptor_containerPortId
              - incident_id
              - incident_sourceZoneID
              - incident_contributors
              - incident_reason
              - id
              - incident_consolidatedSourceHostAndPort
              - sourceDescriptor_classicType
              - sourceDescriptor_zoneID
              - incident_stateOpen
              - incident_sourceCompIdString
              - sourceDescriptor_swType
              - incident_sourceZoneName
              - sourceDescriptor_missingEyeServerId
              - incident_events
              - incident_severity
              - incident_firstOpenedMs
              - sourceDescriptor_deviceId
              - sourceDescriptor_classicId0
              - sourceDescriptor_classicId1
              - actor_id
              - incident_assignedMs
              - sourceDescriptor_objectName
              - sourceDescriptor_name
              - incident_lastOpenedMs
              - sourceDescriptor_eyeServerIdString
              - incident_sourceExternalId
              - incident_lastUpdatedMs
              - incident_lastClosedMs
              - incident_sourceSwId
              - sourceDescriptor_containerDeviceSwId
              - incident_state
              - incident_name
              - incidentClosed
              - sourceDescriptor_swId
              - incident_annotatedBy
              - entuity_url
              - incident_impactDescr
              - sourceDescriptor_zoneName
              - incident_sourceServerId
              - actor_type
              - incident_sourceName
              - incident_sourceContainerName
              - incident_assignedTo
              - incident_components
              - sourceDescriptor_eyeServerId
              - incident_shortHostname
              - sourceDescriptor_containerName
              - actor_reopeningWindowMs
              - sourceDescriptor_classicPortId
              - sourceDescriptor_classicViewId
              - incident_annotation
              - sourceDescriptor_classicDeviceId
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770236-run
      x-source-url: https://api-docs.bigpanda.io/entuity-37770236e0.md
      x-source-page: Entuity
  /oim/logscale/alerts:
    post:
      summary: LogScale
      deprecated: false
      description: 'Ingest alerts from Falcon LogScale (formerly Humio) through the out-of-the-box LogScale integration.

        > ❗ API endpoint > > This API is called at `integrations.bigpanda.io`, not `api.bigpanda.io`.

        '
      operationId: postOimLogscaleAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: access_token
        in: query
        description: ''
        required: true
        example: '{{ACCESS_TOKEN}}'
        schema:
          type: string
      - name: app_key
        in: query
        description: ''
        required: true
        example: '{{APP_KEY}}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: true
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: true
        example: Bearer {{BEARER_TOKEN}}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                repository:
                  type: string
                alert:
                  type: object
                  properties:
                    name:
                      type: string
                    description:
                      type: string
                    id:
                      type: string
                    notifierID:
                      type: string
                    query:
                      type: object
                      properties:
                        queryString:
                          type: string
                        start:
                          type: string
                        end:
                          type: string
                      required:
                      - queryString
                      - start
                      - end
                      x-apidog-orders:
                      - queryString
                      - start
                      - end
                  required:
                  - name
                  - description
                  - id
                  - notifierID
                  - query
                  x-apidog-orders:
                  - name
                  - description
                  - id
                  - notifierID
                  - query
                events:
                  type: array
                  items:
                    type: object
                    properties:
                      '#humioAutoShard':
                        type: string
                      cluster:
                        type: string
                      kubernetes.labels.app.kubernetes.io/instance:
                        type: string
                      log:
                        type: string
                      kubernetes.labels.app.kubernetes.io/name:
                        type: string
                      kubernetes.annotations.kubernetes.io/psp:
                        type: string
                      kubernetes.labels.app.kubernetes.io/component:
                        type: string
                      kubernetes.labels.app:
                        type: string
                      stream:
                        type: string
                      kubernetes.container_image:
                        type: string
                      '@id':
                        type: string
                      kubernetes.host:
                        type: string
                      '@host':
                        type: string
                      '@timezone':
                        type: string
                      '@timestamp.nanos':
                        type: string
                      kubernetes.container_hash:
                        type: string
                      kubernetes.container_name:
                        type: string
                      index:
                        type: string
                      kubernetes.labels.pod-template-generation:
                        type: string
                      kubernetes.namespace_name:
                        type: string
                      '@ingesttimestamp':
                        type: string
                      kubernetes.docker_id:
                        type: string
                      environment:
                        type: string
                      '@timestamp':
                        type: string
                      kubernetes.pod_id:
                        type: string
                      kubernetes.labels.controller-revision-hash:
                        type: string
                      '#repo':
                        type: string
                      kubernetes.pod_name:
                        type: string
                      '@rawstring':
                        type: string
                      time:
                        type: string
                      '#type':
                        type: string
                    required:
                    - '#humioAutoShard'
                    - cluster
                    - kubernetes.labels.app.kubernetes.io/instance
                    - log
                    - kubernetes.labels.app.kubernetes.io/name
                    - kubernetes.annotations.kubernetes.io/psp
                    - kubernetes.labels.app.kubernetes.io/component
                    - kubernetes.labels.app
                    - stream
                    - kubernetes.container_image
                    - '@id'
                    - kubernetes.host
                    - '@host'
                    - '@timezone'
                    - '@timestamp.nanos'
                    - kubernetes.container_hash
                    - kubernetes.container_name
                    - index
                    - kubernetes.labels.pod-template-generation
                    - kubernetes.namespace_name
                    - '@ingesttimestamp'
                    - kubernetes.docker_id
                    - environment
                    - '@timestamp'
                    - kubernetes.pod_id
                    - kubernetes.labels.controller-revision-hash
                    - '#repo'
                    - kubernetes.pod_name
                    - '@rawstring'
                    - time
                    - '#type'
                    x-apidog-orders:
                    - '#humioAutoShard'
                    - cluster
                    - kubernetes.labels.app.kubernetes.io/instance
                    - log
                    - kubernetes.labels.app.kubernetes.io/name
                    - kubernetes.annotations.kubernetes.io/psp
                    - kubernetes.labels.app.kubernetes.io/component
                    - kubernetes.labels.app
                    - stream
                    - kubernetes.container_image
                    - '@id'
                    - kubernetes.host
                    - '@host'
                    - '@timezone'
                    - '@timestamp.nanos'
                    - kubernetes.container_hash
                    - kubernetes.container_name
                    - index
                    - kubernetes.labels.pod-template-generation
                    - kubernetes.namespace_name
                    - '@ingesttimestamp'
                    - kubernetes.docker_id
                    - environment
                    - '@timestamp'
                    - kubernetes.pod_id
                    - kubernetes.labels.controller-revision-hash
                    - '#repo'
                    - kubernetes.pod_name
                    - '@rawstring'
                    - time
                    - '#type'
                numberOfEvents:
                  type: integer
                timestamp:
                  type: string
                warnings:
                  type: string
              required:
              - repository
              - alert
              - events
              - numberOfEvents
              - timestamp
              - warnings
              x-apidog-orders:
              - repository
              - alert
              - events
              - numberOfEvents
              - timestamp
              - warnings
            example:
              repository: container-platform
              alert:
                name: Panda
                description: ''
                id: RebLyUN1OBDrKcUZBjiQK3GfexPJWyIZ
                notifierID: J0yENSVKgdGojxUKozSltnCIg8SuSgSJ
                query:
                  queryString: 'index = "dev-level-2" | "[error]" | !"dns_lookup" '
                  start: 1m
                  end: now
              events:
              - '#humioAutoShard': '19'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:47 [error] 31840#31840: *269463007 recv() failed (104: Connection reset by peer) while
                  reading response header from upstream, client: 10.45.51.124, server: _, request: "POST /engine-rest/external-task/fetchAndLock
                  HTTP/1.1", upstream: "http://10.42.4.176:8080/engine-rest/external-task/fetchAndLock", host: "workflow-incoming-goods-dev.dev2.paas.rewe.local"

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': VXxnP41JSac7hghs3t2Ncclf_6238_164_1683146927
                kubernetes.host: vvm2939
                '@host': rancher-logging-operator-root-fluentd-1
                '@timezone': Z
                '@timestamp.nanos': '563701'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146932823'
                kubernetes.docker_id: aebb570eaa583c33ee826d9d86324d86e89112b0533451146037a6ad6dee2144
                environment: prod
                '@timestamp': '1683146927006'
                kubernetes.pod_id: c39eb5b2-f0e3-4c78-ac13-695067fbbb1c
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-s9d2g
                '@rawstring': '{"log":"2023/05/03 20:48:47 [error] 31840#31840: *269463007 recv() failed (104: Connection
                  reset by peer) while reading response header from upstream, client: 10.45.51.124, server: _, request: \"POST
                  /engine-rest/external-task/fetchAndLock HTTP/1.1\", upstream: \"http://10.42.4.176:8080/engine-rest/external-task/fetchAndLock\",
                  host: \"workflow-incoming-goods-dev.dev2.paas.rewe.local\"\n","stream":"stderr","time":"2023-05-03T20:48:47.006563701Z","kubernetes":{"pod_name":"nginx-ingress-controller-s9d2g","namespace_name":"ingress-nginx","pod_id":"c39eb5b2-f0e3-4c78-ac13-695067fbbb1c","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm2939","container_name":"controller","docker_id":"aebb570eaa583c33ee826d9d86324d86e89112b0533451146037a6ad6dee2144","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:47.006563701Z'
                '#type': json-time
              - '#humioAutoShard': '1'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:46 [error] 32035#32035: *269474265 connect() failed (111: Connection refused) while
                  connecting to upstream, client: 10.45.51.124, server: lpas-mock-server.dev2.paas.rewe.local, request: "GET
                  /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1", upstream: "http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7",
                  host: "lpas-mock-server.dev2.paas.rewe.local"

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': GoWMfc0brzxvv5C6wTkkzOXX_1846_534_1683146926
                kubernetes.host: vvm2939
                '@host': rancher-logging-operator-root-fluentd-1
                '@timezone': Z
                '@timestamp.nanos': '880078'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146927778'
                kubernetes.docker_id: aebb570eaa583c33ee826d9d86324d86e89112b0533451146037a6ad6dee2144
                environment: prod
                '@timestamp': '1683146926355'
                kubernetes.pod_id: c39eb5b2-f0e3-4c78-ac13-695067fbbb1c
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-s9d2g
                '@rawstring': '{"log":"2023/05/03 20:48:46 [error] 32035#32035: *269474265 connect() failed (111: Connection
                  refused) while connecting to upstream, client: 10.45.51.124, server: lpas-mock-server.dev2.paas.rewe.local,
                  request: \"GET /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1\", upstream: \"http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7\",
                  host: \"lpas-mock-server.dev2.paas.rewe.local\"\n","stream":"stderr","time":"2023-05-03T20:48:46.355880078Z","kubernetes":{"pod_name":"nginx-ingress-controller-s9d2g","namespace_name":"ingress-nginx","pod_id":"c39eb5b2-f0e3-4c78-ac13-695067fbbb1c","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm2939","container_name":"controller","docker_id":"aebb570eaa583c33ee826d9d86324d86e89112b0533451146037a6ad6dee2144","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:46.355880078Z'
                '#type': json-time
              - '#humioAutoShard': '1'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:46 [error] 32035#32035: *269474265 connect() failed (111: Connection refused) while
                  connecting to upstream, client: 10.45.51.124, server: lpas-mock-server.dev2.paas.rewe.local, request: "GET
                  /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1", upstream: "http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7",
                  host: "lpas-mock-server.dev2.paas.rewe.local"

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': GoWMfc0brzxvv5C6wTkkzOXX_1846_533_1683146926
                kubernetes.host: vvm2939
                '@host': rancher-logging-operator-root-fluentd-1
                '@timezone': Z
                '@timestamp.nanos': '218081'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146927778'
                kubernetes.docker_id: aebb570eaa583c33ee826d9d86324d86e89112b0533451146037a6ad6dee2144
                environment: prod
                '@timestamp': '1683146926355'
                kubernetes.pod_id: c39eb5b2-f0e3-4c78-ac13-695067fbbb1c
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-s9d2g
                '@rawstring': '{"log":"2023/05/03 20:48:46 [error] 32035#32035: *269474265 connect() failed (111: Connection
                  refused) while connecting to upstream, client: 10.45.51.124, server: lpas-mock-server.dev2.paas.rewe.local,
                  request: \"GET /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1\", upstream: \"http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7\",
                  host: \"lpas-mock-server.dev2.paas.rewe.local\"\n","stream":"stderr","time":"2023-05-03T20:48:46.355218081Z","kubernetes":{"pod_name":"nginx-ingress-controller-s9d2g","namespace_name":"ingress-nginx","pod_id":"c39eb5b2-f0e3-4c78-ac13-695067fbbb1c","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm2939","container_name":"controller","docker_id":"aebb570eaa583c33ee826d9d86324d86e89112b0533451146037a6ad6dee2144","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:46.355218081Z'
                '#type': json-time
              - '#humioAutoShard': '1'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:46 [error] 32035#32035: *269474265 connect() failed (111: Connection refused) while
                  connecting to upstream, client: 10.45.51.124, server: lpas-mock-server.dev2.paas.rewe.local, request: "GET
                  /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1", upstream: "http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7",
                  host: "lpas-mock-server.dev2.paas.rewe.local"

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': GoWMfc0brzxvv5C6wTkkzOXX_1846_532_1683146926
                kubernetes.host: vvm2939
                '@host': rancher-logging-operator-root-fluentd-1
                '@timezone': Z
                '@timestamp.nanos': '354993'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146927778'
                kubernetes.docker_id: aebb570eaa583c33ee826d9d86324d86e89112b0533451146037a6ad6dee2144
                environment: prod
                '@timestamp': '1683146926354'
                kubernetes.pod_id: c39eb5b2-f0e3-4c78-ac13-695067fbbb1c
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-s9d2g
                '@rawstring': '{"log":"2023/05/03 20:48:46 [error] 32035#32035: *269474265 connect() failed (111: Connection
                  refused) while connecting to upstream, client: 10.45.51.124, server: lpas-mock-server.dev2.paas.rewe.local,
                  request: \"GET /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1\", upstream: \"http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7\",
                  host: \"lpas-mock-server.dev2.paas.rewe.local\"\n","stream":"stderr","time":"2023-05-03T20:48:46.354354993Z","kubernetes":{"pod_name":"nginx-ingress-controller-s9d2g","namespace_name":"ingress-nginx","pod_id":"c39eb5b2-f0e3-4c78-ac13-695067fbbb1c","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm2939","container_name":"controller","docker_id":"aebb570eaa583c33ee826d9d86324d86e89112b0533451146037a6ad6dee2144","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:46.354354993Z'
                '#type': json-time
              - '#humioAutoShard': '35'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:32 [error] 35848#35848: *19957616 lua udp socket read timed out, context: ngx.timer

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': LLXG351zJzleLnw2BhQ28Opg_6501_377_1683146912
                kubernetes.host: vvm3031
                '@host': rancher-logging-operator-root-fluentd-0
                '@timezone': Z
                '@timestamp.nanos': '177885'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146916987'
                kubernetes.docker_id: 6c46bd19f6bbc972d21820836830d185505defa71f06ff49c81c6623ea83a20e
                environment: prod
                '@timestamp': '1683146912130'
                kubernetes.pod_id: 04d5b4d6-523d-438c-949d-d7939c8621e5
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-86kd4
                '@rawstring': '{"log":"2023/05/03 20:48:32 [error] 35848#35848: *19957616 lua udp socket read timed out, context:
                  ngx.timer\n","stream":"stderr","time":"2023-05-03T20:48:32.130177885Z","kubernetes":{"pod_name":"nginx-ingress-controller-86kd4","namespace_name":"ingress-nginx","pod_id":"04d5b4d6-523d-438c-949d-d7939c8621e5","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm3031","container_name":"controller","docker_id":"6c46bd19f6bbc972d21820836830d185505defa71f06ff49c81c6623ea83a20e","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:32.130177885Z'
                '#type': json-time
              - '#humioAutoShard': '13'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:31 [error] 23476#23476: *269341446 connect() failed (111: Connection refused) while
                  connecting to upstream, client: 10.45.51.124, server: lpas-mock-server.dev2.paas.rewe.local, request: "GET
                  /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1", upstream: "http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7",
                  host: "lpas-mock-server.dev2.paas.rewe.local"

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': ZDKj351HTNfjZpqjGEggRgpm_4672_62_1683146911
                kubernetes.host: vvm2947
                '@host': rancher-logging-operator-root-fluentd-0
                '@timezone': Z
                '@timestamp.nanos': '997181'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146916981'
                kubernetes.docker_id: 6392bf42768b023911baa29e1b7e3b84cec0b7ab46253e1cde393ee4f1d25442
                environment: prod
                '@timestamp': '1683146911363'
                kubernetes.pod_id: 12e7f8f5-c9e7-4c0c-8776-adf273ce4405
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-lgbx9
                '@rawstring': '{"log":"2023/05/03 20:48:31 [error] 23476#23476: *269341446 connect() failed (111: Connection
                  refused) while connecting to upstream, client: 10.45.51.124, server: lpas-mock-server.dev2.paas.rewe.local,
                  request: \"GET /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1\", upstream: \"http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7\",
                  host: \"lpas-mock-server.dev2.paas.rewe.local\"\n","stream":"stderr","time":"2023-05-03T20:48:31.363997181Z","kubernetes":{"pod_name":"nginx-ingress-controller-lgbx9","namespace_name":"ingress-nginx","pod_id":"12e7f8f5-c9e7-4c0c-8776-adf273ce4405","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm2947","container_name":"controller","docker_id":"6392bf42768b023911baa29e1b7e3b84cec0b7ab46253e1cde393ee4f1d25442","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:31.363997181Z'
                '#type': json-time
              - '#humioAutoShard': '13'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:31 [error] 23476#23476: *269341446 connect() failed (111: Connection refused) while
                  connecting to upstream, client: 10.45.51.124, server: lpas-mock-server.dev2.paas.rewe.local, request: "GET
                  /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1", upstream: "http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7",
                  host: "lpas-mock-server.dev2.paas.rewe.local"

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': ZDKj351HTNfjZpqjGEggRgpm_4672_61_1683146911
                kubernetes.host: vvm2947
                '@host': rancher-logging-operator-root-fluentd-0
                '@timezone': Z
                '@timestamp.nanos': '504126'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146916981'
                kubernetes.docker_id: 6392bf42768b023911baa29e1b7e3b84cec0b7ab46253e1cde393ee4f1d25442
                environment: prod
                '@timestamp': '1683146911363'
                kubernetes.pod_id: 12e7f8f5-c9e7-4c0c-8776-adf273ce4405
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-lgbx9
                '@rawstring': '{"log":"2023/05/03 20:48:31 [error] 23476#23476: *269341446 connect() failed (111: Connection
                  refused) while connecting to upstream, client: 10.45.51.124, server: lpas-mock-server.dev2.paas.rewe.local,
                  request: \"GET /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1\", upstream: \"http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7\",
                  host: \"lpas-mock-server.dev2.paas.rewe.local\"\n","stream":"stderr","time":"2023-05-03T20:48:31.363504126Z","kubernetes":{"pod_name":"nginx-ingress-controller-lgbx9","namespace_name":"ingress-nginx","pod_id":"12e7f8f5-c9e7-4c0c-8776-adf273ce4405","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm2947","container_name":"controller","docker_id":"6392bf42768b023911baa29e1b7e3b84cec0b7ab46253e1cde393ee4f1d25442","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:31.363504126Z'
                '#type': json-time
              - '#humioAutoShard': '13'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:31 [error] 23476#23476: *269341446 connect() failed (111: Connection refused) while
                  connecting to upstream, client: 10.45.51.124, server: lpas-mock-server.dev2.paas.rewe.local, request: "GET
                  /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1", upstream: "http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7",
                  host: "lpas-mock-server.dev2.paas.rewe.local"

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': ZDKj351HTNfjZpqjGEggRgpm_4672_60_1683146911
                kubernetes.host: vvm2947
                '@host': rancher-logging-operator-root-fluentd-0
                '@timezone': Z
                '@timestamp.nanos': '949203'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146916981'
                kubernetes.docker_id: 6392bf42768b023911baa29e1b7e3b84cec0b7ab46253e1cde393ee4f1d25442
                environment: prod
                '@timestamp': '1683146911362'
                kubernetes.pod_id: 12e7f8f5-c9e7-4c0c-8776-adf273ce4405
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-lgbx9
                '@rawstring': '{"log":"2023/05/03 20:48:31 [error] 23476#23476: *269341446 connect() failed (111: Connection
                  refused) while connecting to upstream, client: 10.45.51.124, server: lpas-mock-server.dev2.paas.rewe.local,
                  request: \"GET /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1\", upstream: \"http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7\",
                  host: \"lpas-mock-server.dev2.paas.rewe.local\"\n","stream":"stderr","time":"2023-05-03T20:48:31.362949203Z","kubernetes":{"pod_name":"nginx-ingress-controller-lgbx9","namespace_name":"ingress-nginx","pod_id":"12e7f8f5-c9e7-4c0c-8776-adf273ce4405","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm2947","container_name":"controller","docker_id":"6392bf42768b023911baa29e1b7e3b84cec0b7ab46253e1cde393ee4f1d25442","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:31.362949203Z'
                '#type': json-time
              - '#humioAutoShard': '0'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:23 [error] 83957#83957: *111280372 recv() failed (104: Connection reset by peer) while
                  reading response header from upstream, client: 10.45.51.125, server: _, request: "POST /instances HTTP/1.1",
                  upstream: "http://10.42.4.176:8080/instances", host: "pim-springboot-admin-app.dev2.paas.rewe.local"

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': NYenCEm53cMxOwVzW7eJHKG4_2566_118_1683146903
                kubernetes.host: vvm2949
                '@host': rancher-logging-operator-root-fluentd-0
                '@timezone': Z
                '@timestamp.nanos': '421867'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146909922'
                kubernetes.docker_id: 707be58cb7839751f03be101f243461fa6307ffbf83dbc6b2566be0196900a75
                environment: prod
                '@timestamp': '1683146903296'
                kubernetes.pod_id: ae5d1cc0-7461-4424-9188-5872589937e0
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-pf7j6
                '@rawstring': '{"log":"2023/05/03 20:48:23 [error] 83957#83957: *111280372 recv() failed (104: Connection
                  reset by peer) while reading response header from upstream, client: 10.45.51.125, server: _, request: \"POST
                  /instances HTTP/1.1\", upstream: \"http://10.42.4.176:8080/instances\", host: \"pim-springboot-admin-app.dev2.paas.rewe.local\"\n","stream":"stderr","time":"2023-05-03T20:48:23.296421867Z","kubernetes":{"pod_name":"nginx-ingress-controller-pf7j6","namespace_name":"ingress-nginx","pod_id":"ae5d1cc0-7461-4424-9188-5872589937e0","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm2949","container_name":"controller","docker_id":"707be58cb7839751f03be101f243461fa6307ffbf83dbc6b2566be0196900a75","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:23.296421867Z'
                '#type': json-time
              - '#humioAutoShard': '21'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:21 [error] 35951#35951: *19956982 lua udp socket read timed out, context: ngx.timer

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': o9iHdUqETF00HfAlxuDhOFPQ_5890_420_1683146901
                kubernetes.host: vvm3031
                '@host': rancher-logging-operator-root-fluentd-1
                '@timezone': Z
                '@timestamp.nanos': '462040'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146902832'
                kubernetes.docker_id: 6c46bd19f6bbc972d21820836830d185505defa71f06ff49c81c6623ea83a20e
                environment: prod
                '@timestamp': '1683146901215'
                kubernetes.pod_id: 04d5b4d6-523d-438c-949d-d7939c8621e5
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-86kd4
                '@rawstring': '{"log":"2023/05/03 20:48:21 [error] 35951#35951: *19956982 lua udp socket read timed out, context:
                  ngx.timer\n","stream":"stderr","time":"2023-05-03T20:48:21.21546204Z","kubernetes":{"pod_name":"nginx-ingress-controller-86kd4","namespace_name":"ingress-nginx","pod_id":"04d5b4d6-523d-438c-949d-d7939c8621e5","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm3031","container_name":"controller","docker_id":"6c46bd19f6bbc972d21820836830d185505defa71f06ff49c81c6623ea83a20e","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:21.21546204Z'
                '#type': json-time
              - '#humioAutoShard': '21'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:21 [error] 35818#35818: *19956970 lua udp socket read timed out, context: ngx.timer

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': o9iHdUqETF00HfAlxuDhOFPQ_5890_418_1683146901
                kubernetes.host: vvm3031
                '@host': rancher-logging-operator-root-fluentd-1
                '@timezone': Z
                '@timestamp.nanos': '576086'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146902832'
                kubernetes.docker_id: 6c46bd19f6bbc972d21820836830d185505defa71f06ff49c81c6623ea83a20e
                environment: prod
                '@timestamp': '1683146901163'
                kubernetes.pod_id: 04d5b4d6-523d-438c-949d-d7939c8621e5
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-86kd4
                '@rawstring': '{"log":"2023/05/03 20:48:21 [error] 35818#35818: *19956970 lua udp socket read timed out, context:
                  ngx.timer\n","stream":"stderr","time":"2023-05-03T20:48:21.163576086Z","kubernetes":{"pod_name":"nginx-ingress-controller-86kd4","namespace_name":"ingress-nginx","pod_id":"04d5b4d6-523d-438c-949d-d7939c8621e5","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm3031","container_name":"controller","docker_id":"6c46bd19f6bbc972d21820836830d185505defa71f06ff49c81c6623ea83a20e","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:21.163576086Z'
                '#type': json-time
              - '#humioAutoShard': '31'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:16 [error] 84946#84946: *182489727 lua udp socket read timed out, context: ngx.timer

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': tHzHxeociqR9aNEWtIxInhiS_728_288_1683146896
                kubernetes.host: vvm3032
                '@host': rancher-logging-operator-root-fluentd-0
                '@timezone': Z
                '@timestamp.nanos': '828001'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146901900'
                kubernetes.docker_id: 12de2c11a9f8779ee3af242ac80de427dcb70a1fef73bdce2a1ab29e1d61c031
                environment: prod
                '@timestamp': '1683146896713'
                kubernetes.pod_id: 91d5860f-7e27-45f0-93a4-28137e572611
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-6rtw4
                '@rawstring': '{"log":"2023/05/03 20:48:16 [error] 84946#84946: *182489727 lua udp socket read timed out,
                  context: ngx.timer\n","stream":"stderr","time":"2023-05-03T20:48:16.713828001Z","kubernetes":{"pod_name":"nginx-ingress-controller-6rtw4","namespace_name":"ingress-nginx","pod_id":"91d5860f-7e27-45f0-93a4-28137e572611","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm3032","container_name":"controller","docker_id":"12de2c11a9f8779ee3af242ac80de427dcb70a1fef73bdce2a1ab29e1d61c031","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:16.713828001Z'
                '#type': json-time
              - '#humioAutoShard': '9'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:16 [error] 50975#50975: *76961246 connect() failed (111: Connection refused) while
                  connecting to upstream, client: 10.45.51.125, server: lpas-mock-server.dev2.paas.rewe.local, request: "GET
                  /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1", upstream: "http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7",
                  host: "lpas-mock-server.dev2.paas.rewe.local"

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': wOkRmPHIppJcpCgoPIhfsjMh_2861_505_1683146896
                kubernetes.host: vvm2927
                '@host': rancher-logging-operator-root-fluentd-0
                '@timezone': Z
                '@timestamp.nanos': '419327'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146898764'
                kubernetes.docker_id: 7b64444e910db783b6bf14f26ff14972893ea3dc21d2a4d968d1adee128b0063
                environment: prod
                '@timestamp': '1683146896365'
                kubernetes.pod_id: 5530b61c-d2b2-4ac2-84c5-43e38e2dd3c7
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-pzl96
                '@rawstring': '{"log":"2023/05/03 20:48:16 [error] 50975#50975: *76961246 connect() failed (111: Connection
                  refused) while connecting to upstream, client: 10.45.51.125, server: lpas-mock-server.dev2.paas.rewe.local,
                  request: \"GET /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1\", upstream: \"http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7\",
                  host: \"lpas-mock-server.dev2.paas.rewe.local\"\n","stream":"stderr","time":"2023-05-03T20:48:16.365419327Z","kubernetes":{"pod_name":"nginx-ingress-controller-pzl96","namespace_name":"ingress-nginx","pod_id":"5530b61c-d2b2-4ac2-84c5-43e38e2dd3c7","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm2927","container_name":"controller","docker_id":"7b64444e910db783b6bf14f26ff14972893ea3dc21d2a4d968d1adee128b0063","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:16.365419327Z'
                '#type': json-time
              - '#humioAutoShard': '9'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:16 [error] 50975#50975: *76961246 connect() failed (111: Connection refused) while
                  connecting to upstream, client: 10.45.51.125, server: lpas-mock-server.dev2.paas.rewe.local, request: "GET
                  /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1", upstream: "http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7",
                  host: "lpas-mock-server.dev2.paas.rewe.local"

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': wOkRmPHIppJcpCgoPIhfsjMh_2861_504_1683146896
                kubernetes.host: vvm2927
                '@host': rancher-logging-operator-root-fluentd-0
                '@timezone': Z
                '@timestamp.nanos': '726889'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146898764'
                kubernetes.docker_id: 7b64444e910db783b6bf14f26ff14972893ea3dc21d2a4d968d1adee128b0063
                environment: prod
                '@timestamp': '1683146896364'
                kubernetes.pod_id: 5530b61c-d2b2-4ac2-84c5-43e38e2dd3c7
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-pzl96
                '@rawstring': '{"log":"2023/05/03 20:48:16 [error] 50975#50975: *76961246 connect() failed (111: Connection
                  refused) while connecting to upstream, client: 10.45.51.125, server: lpas-mock-server.dev2.paas.rewe.local,
                  request: \"GET /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1\", upstream: \"http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7\",
                  host: \"lpas-mock-server.dev2.paas.rewe.local\"\n","stream":"stderr","time":"2023-05-03T20:48:16.364726889Z","kubernetes":{"pod_name":"nginx-ingress-controller-pzl96","namespace_name":"ingress-nginx","pod_id":"5530b61c-d2b2-4ac2-84c5-43e38e2dd3c7","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm2927","container_name":"controller","docker_id":"7b64444e910db783b6bf14f26ff14972893ea3dc21d2a4d968d1adee128b0063","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:16.364726889Z'
                '#type': json-time
              - '#humioAutoShard': '9'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:16 [error] 50975#50975: *76961246 connect() failed (111: Connection refused) while
                  connecting to upstream, client: 10.45.51.125, server: lpas-mock-server.dev2.paas.rewe.local, request: "GET
                  /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1", upstream: "http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7",
                  host: "lpas-mock-server.dev2.paas.rewe.local"

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': wOkRmPHIppJcpCgoPIhfsjMh_2861_503_1683146896
                kubernetes.host: vvm2927
                '@host': rancher-logging-operator-root-fluentd-0
                '@timezone': Z
                '@timestamp.nanos': '87876'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146898764'
                kubernetes.docker_id: 7b64444e910db783b6bf14f26ff14972893ea3dc21d2a4d968d1adee128b0063
                environment: prod
                '@timestamp': '1683146896364'
                kubernetes.pod_id: 5530b61c-d2b2-4ac2-84c5-43e38e2dd3c7
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-pzl96
                '@rawstring': '{"log":"2023/05/03 20:48:16 [error] 50975#50975: *76961246 connect() failed (111: Connection
                  refused) while connecting to upstream, client: 10.45.51.125, server: lpas-mock-server.dev2.paas.rewe.local,
                  request: \"GET /platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7
                  HTTP/1.1\", upstream: \"http://10.42.14.107:8080/platform-web/platform-register/v1/node-id/lpas-k8s-bundle-6996b484cd-44nfq_10_42_6_103_b552c8ec-4d1c-341f-8de0-76b66eb096e7\",
                  host: \"lpas-mock-server.dev2.paas.rewe.local\"\n","stream":"stderr","time":"2023-05-03T20:48:16.364087876Z","kubernetes":{"pod_name":"nginx-ingress-controller-pzl96","namespace_name":"ingress-nginx","pod_id":"5530b61c-d2b2-4ac2-84c5-43e38e2dd3c7","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm2927","container_name":"controller","docker_id":"7b64444e910db783b6bf14f26ff14972893ea3dc21d2a4d968d1adee128b0063","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:16.364087876Z'
                '#type': json-time
              - '#humioAutoShard': '31'
                cluster: dev-level-2
                kubernetes.labels.app.kubernetes.io/instance: ingress-nginx
                log: '2023/05/03 20:48:07 [error] 31840#31840: *269463007 recv() failed (104: Connection reset by peer) while
                  reading response header from upstream, client: 10.45.51.124, server: _, request: "POST /engine-rest/external-task/fetchAndLock
                  HTTP/1.1", upstream: "http://10.42.4.176:8080/engine-rest/external-task/fetchAndLock", host: "workflow-incoming-goods-dev.dev2.paas.rewe.local"

                  '
                kubernetes.labels.app.kubernetes.io/name: ingress-nginx
                kubernetes.annotations.kubernetes.io/psp: default-psp
                kubernetes.labels.app.kubernetes.io/component: controller
                kubernetes.labels.app: ingress-nginx
                stream: stderr
                kubernetes.container_image: docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1
                '@id': tHzHxeociqR9aNEWtIxInhiS_723_414_1683146887
                kubernetes.host: vvm2939
                '@host': rancher-logging-operator-root-fluentd-1
                '@timezone': Z
                '@timestamp.nanos': '60883'
                kubernetes.container_hash: docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560
                kubernetes.container_name: controller
                index: dev-level-2
                kubernetes.labels.pod-template-generation: '23'
                kubernetes.namespace_name: ingress-nginx
                '@ingesttimestamp': '1683146891838'
                kubernetes.docker_id: aebb570eaa583c33ee826d9d86324d86e89112b0533451146037a6ad6dee2144
                environment: prod
                '@timestamp': '1683146887006'
                kubernetes.pod_id: c39eb5b2-f0e3-4c78-ac13-695067fbbb1c
                kubernetes.labels.controller-revision-hash: 7c546bdb79
                '#repo': container-platform
                kubernetes.pod_name: nginx-ingress-controller-s9d2g
                '@rawstring': '{"log":"2023/05/03 20:48:07 [error] 31840#31840: *269463007 recv() failed (104: Connection
                  reset by peer) while reading response header from upstream, client: 10.45.51.124, server: _, request: \"POST
                  /engine-rest/external-task/fetchAndLock HTTP/1.1\", upstream: \"http://10.42.4.176:8080/engine-rest/external-task/fetchAndLock\",
                  host: \"workflow-incoming-goods-dev.dev2.paas.rewe.local\"\n","stream":"stderr","time":"2023-05-03T20:48:07.006060883Z","kubernetes":{"pod_name":"nginx-ingress-controller-s9d2g","namespace_name":"ingress-nginx","pod_id":"c39eb5b2-f0e3-4c78-ac13-695067fbbb1c","labels":{"app":"ingress-nginx","app.kubernetes.io/component":"controller","app.kubernetes.io/instance":"ingress-nginx","app.kubernetes.io/name":"ingress-nginx","controller-revision-hash":"7c546bdb79","pod-template-generation":"23"},"annotations":{"kubernetes.io/psp":"default-psp"},"host":"vvm2939","container_name":"controller","docker_id":"aebb570eaa583c33ee826d9d86324d86e89112b0533451146037a6ad6dee2144","container_hash":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller@sha256:97c5d92cf9a6313551ad916989f064dc70a75f0862427a412c22fa762fbd1560","container_image":"docker.artifactory.rewe.local/rancher/nginx-ingress-controller:nginx-1.2.1-rancher1"},"index":"dev-level-2","cluster":"dev-level-2","environment":"prod"}'
                time: '2023-05-03T20:48:07.006060883Z'
                '#type': json-time
              numberOfEvents: 16
              timestamp: '2023-05-03T20:49:03.434Z'
              warnings: ''
      responses:
        '200':
          x-apidog-ordering: 0
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties: {}
                x-apidog-orders: []
          headers: {}
          x-apidog-name: ''
        '400':
          x-apidog-ordering: 1
          description: ''
          headers: {}
          x-apidog-name: ''
        '401':
          x-apidog-ordering: 2
          description: ''
          headers: {}
          x-apidog-name: ''
        '429':
          x-apidog-ordering: 3
          description: ''
          headers: {}
          x-apidog-name: ''
        '500':
          x-apidog-ordering: 4
          description: ''
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770240-run
      x-source-url: https://api-docs.bigpanda.io/logscale-37770240e0.md
      x-source-page: LogScale
  /oim/logicmonitor/alerts:
    post:
      summary: LogicMonitor
      deprecated: false
      description: Reference payload for LogicMonitor. Shows the well-formed OIM alert payload shape for a LogicMonitor source
        — send it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing LogicMonitor integration in BigPanda; the payload normalizes through that integration's parsing
        rules.
      operationId: postOimLogicmonitorAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                checkpoint:
                  type: string
                instance:
                  type: string
                batchjob:
                  type: integer
                current_collector:
                  type: integer
                description:
                  type: string
                datapoint_description:
                  type: string
                system_ips:
                  type: string
                  format: ip-address
                threshold:
                  type: integer
                exitcode:
                  type: integer
                alert_type:
                  type: string
                userdata:
                  type: string
                device_url:
                  type: string
                  format: uri
                alert_id:
                  type: integer
                host:
                  type: string
                current_collector_description:
                  type: string
                timestamp:
                  type: string
                  format: date-time
                datapoint:
                  type: string
                start:
                  type: string
                  format: style
                check:
                  type: string
                message:
                  type: string
                service_url:
                  type: string
                datasource:
                  type: string
                detail:
                  type: string
                system_sysinfo:
                  type: string
                facility:
                  type: string
                system_preferred_collector_description:
                  type: string
                system_preferred_collector_id:
                  type: string
                status:
                  type: string
                lm_severity_level:
                  type: string
              x-apidog-orders:
              - checkpoint
              - instance
              - batchjob
              - current_collector
              - description
              - datapoint_description
              - system_ips
              - threshold
              - exitcode
              - alert_type
              - userdata
              - device_url
              - alert_id
              - host
              - current_collector_description
              - timestamp
              - datapoint
              - start
              - check
              - message
              - service_url
              - datasource
              - detail
              - system_sysinfo
              - facility
              - system_preferred_collector_description
              - system_preferred_collector_id
              - status
              - lm_severity_level
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770218-run
      x-source-url: https://api-docs.bigpanda.io/logicmonitor-37770218e0.md
      x-source-page: LogicMonitor
  /oim/nagios/alerts:
    post:
      summary: Nagios
      deprecated: false
      description: Reference payload for Nagios. Shows the well-formed OIM alert payload shape for a Nagios source — send
        it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing Nagios integration in BigPanda; the payload normalizes through that integration's parsing rules.
      operationId: postOimNagiosAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                events:
                  type: array
                  items:
                    type: object
                    properties:
                      LASTSERVICESTATECHANGE:
                        type: integer
                      SERVICESTATE:
                        type: string
                      HOSTNAME:
                        type: string
                      LASTHOSTSTATECHANGE:
                        type: integer
                      HOSTSTATE:
                        type: string
                      SERVICEOUTPUT:
                        type: string
                      HOSTGROUPNAMES:
                        type: string
                      NOTIFICATIONTYPE:
                        type: string
                      HOSTOUTPUT:
                        type: string
                      SERVICEDESC:
                        type: string
                    x-apidog-orders:
                    - LASTSERVICESTATECHANGE
                    - SERVICESTATE
                    - HOSTNAME
                    - LASTHOSTSTATECHANGE
                    - HOSTSTATE
                    - SERVICEOUTPUT
                    - HOSTGROUPNAMES
                    - NOTIFICATIONTYPE
                    - HOSTOUTPUT
                    - SERVICEDESC
                    x-apidog-ignore-properties: []
              x-apidog-orders:
              - events
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770228-run
      x-source-url: https://api-docs.bigpanda.io/nagios-37770228e0.md
      x-source-page: Nagios
  /oim/newrelic/alerts:
    post:
      summary: New Relic
      deprecated: false
      description: Reference payload for New Relic. Shows the well-formed OIM alert payload shape for a New Relic source —
        send it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing New Relic integration in BigPanda; the payload normalizes through that integration's parsing
        rules.
      operationId: postOimNewrelicAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                alert_policy_names:
                  type: array
                  items:
                    type: string
                issue_url:
                  type: string
                  format: uri
                primary_impacted_entity:
                  type: string
                sources:
                  type: array
                  items:
                    type: string
                impacted_entities:
                  type: array
                  items:
                    type: string
                workflow_name:
                  type: string
                created_at:
                  type: integer
                alert_condition_names:
                  type: array
                  items:
                    type: string
                trigger:
                  type: string
                title:
                  type: string
                  format: style
                priority:
                  type: string
                bp_status:
                  type: string
                updated_at:
                  type: integer
                id:
                  type: string
                  format: utc-millisec
                state:
                  type: string
                is_correlated:
                  type: string
                total_incidents:
                  type: integer
              x-apidog-orders:
              - alert_policy_names
              - issue_url
              - primary_impacted_entity
              - sources
              - impacted_entities
              - workflow_name
              - created_at
              - alert_condition_names
              - trigger
              - title
              - priority
              - bp_status
              - updated_at
              - id
              - state
              - is_correlated
              - total_incidents
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770219-run
      x-source-url: https://api-docs.bigpanda.io/new-relic-37770219e0.md
      x-source-page: New Relic
  /oim/prometheus/alerts:
    post:
      summary: Prometheus
      deprecated: false
      description: Reference payload for Prometheus. Shows the well-formed OIM alert payload shape for a Prometheus source
        — send it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing Prometheus integration in BigPanda; the payload normalizes through that integration's parsing
        rules.
      operationId: postOimPrometheusAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {ORG_BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                alerts:
                  type: array
                  items:
                    type: object
                    properties:
                      generatorURL:
                        type: string
                        format: uri
                      fingerprint:
                        type: string
                        format: utc-millisec
                      annotations:
                        type: object
                        properties:
                          description:
                            type: string
                          runbook_url:
                            type: string
                            format: uri
                        x-apidog-orders:
                        - description
                        - runbook_url
                        x-apidog-ignore-properties: []
                      startsAt:
                        type: string
                        format: date-time
                      endsAt:
                        type: string
                        format: date-time
                      status:
                        type: string
                      labels:
                        type: object
                        properties:
                          severity:
                            type: string
                          instance:
                            type: string
                          alertname:
                            type: string
                          team:
                            type: string
                          env:
                            type: string
                          job:
                            type: string
                          locale:
                            type: string
                          timestamp:
                            type: string
                        x-apidog-orders:
                        - severity
                        - instance
                        - alertname
                        - team
                        - env
                        - job
                        - locale
                        - timestamp
                        x-apidog-ignore-properties: []
                    x-apidog-orders:
                    - generatorURL
                    - fingerprint
                    - annotations
                    - startsAt
                    - endsAt
                    - status
                    - labels
                    x-apidog-ignore-properties: []
                commonLabels:
                  type: object
                  properties:
                    instance:
                      type: string
                    alertname:
                      type: string
                    team:
                      type: string
                    env:
                      type: string
                    job:
                      type: string
                    locale:
                      type: string
                    timestamp:
                      type: string
                  x-apidog-orders:
                  - instance
                  - alertname
                  - team
                  - env
                  - job
                  - locale
                  - timestamp
                  x-apidog-ignore-properties: []
                externalURL:
                  type: string
                  format: uri
                groupLabels:
                  type: object
                  properties:
                    instance:
                      type: string
                    alertname:
                      type: string
                    team:
                      type: string
                    env:
                      type: string
                    job:
                      type: string
                    locale:
                      type: string
                    timestamp:
                      type: string
                  x-apidog-orders:
                  - instance
                  - alertname
                  - team
                  - env
                  - job
                  - locale
                  - timestamp
                  x-apidog-ignore-properties: []
                receiver:
                  type: string
                version:
                  type: string
                  format: utc-millisec
                commonAnnotations:
                  type: object
                  properties:
                    description:
                      type: string
                    runbook_url:
                      type: string
                      format: uri
                  x-apidog-orders:
                  - description
                  - runbook_url
                  x-apidog-ignore-properties: []
                status:
                  type: string
              x-apidog-orders:
              - alerts
              - commonLabels
              - externalURL
              - groupLabels
              - receiver
              - version
              - commonAnnotations
              - status
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770237-run
      x-source-url: https://api-docs.bigpanda.io/prometheus-37770237e0.md
      x-source-page: Prometheus
  /oim/scom_v2/alerts:
    post:
      summary: SCOM
      deprecated: false
      description: Reference payload for Microsoft SCOM. Shows the well-formed OIM alert payload shape for a Microsoft SCOM
        source — send it against a test integration's app key to validate the pipeline end to end before connecting production
        traffic. Requires an existing Microsoft SCOM integration in BigPanda; the payload normalizes through that integration's
        parsing rules.
      operationId: postOimScomV2Alerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                alerts:
                  type: array
                  items:
                    type: object
                    properties:
                      RepeatCount:
                        type: integer
                      Owner:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      SiteName:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      AlertPriority:
                        type: string
                      History:
                        type: string
                      LastModified:
                        type: string
                        format: date-time
                      TimeRaised:
                        type: string
                        format: date-time
                      Elevation:
                        type: integer
                      MonitoringObjectName:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      AlertStringId:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      SCOM_Server:
                        type: string
                      MonitoringObjectDisplayName:
                        type: string
                      ConnectorId:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      Status:
                        type: string
                      ProblemId:
                        type: string
                      AlertName:
                        type: string
                      Parameters:
                        type: array
                        items:
                          type: string
                      CustomField10:
                        type: string
                      Priority:
                        type: integer
                      TimeResolutionStateLastModified:
                        type: string
                        format: date-time
                      PrincipalName:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      AlertState:
                        type: string
                      AlertDescription:
                        type: string
                        format: style
                      TicketId:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      NetbiosDomainName:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      ResolutionState:
                        type: integer
                      LastModifiedBy:
                        type: string
                      Category:
                        type: string
                      ManagementGroup:
                        type: string
                      AlertSeverity:
                        type: string
                      ConnectorStatus:
                        type: integer
                      RuleId:
                        type: string
                      TfsWorkItemId:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      HostID:
                        type: string
                      MonitoringObjectFullName:
                        type: string
                      AlertParams:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      DisplayName:
                        type: string
                      TfsWorkItemOwner:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      TimeResolved:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      TimeAdded:
                        type: string
                        format: date-time
                      LastModifiedByNonConnector:
                        type: string
                        format: date-time
                      NetbiosComputerName:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      CustomField9:
                        type: string
                      MonitoringObjectPath:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      Severity:
                        type: integer
                      CustomField1:
                        type: string
                      CustomField2:
                        type: string
                      IsMonitorAlert:
                        type: boolean
                      AlertId:
                        type: string
                      CustomField3:
                        type: string
                      CustomField4:
                        type: string
                      CustomField5:
                        type: string
                      CustomField6:
                        type: string
                      ResolvedBy:
                        type: object
                        x-apidog-orders: []
                        properties: {}
                        x-apidog-ignore-properties: []
                      CustomField7:
                        type: string
                      CustomField8:
                        type: string
                    x-apidog-orders:
                    - RepeatCount
                    - Owner
                    - SiteName
                    - AlertPriority
                    - History
                    - LastModified
                    - TimeRaised
                    - Elevation
                    - MonitoringObjectName
                    - AlertStringId
                    - SCOM_Server
                    - MonitoringObjectDisplayName
                    - ConnectorId
                    - Status
                    - ProblemId
                    - AlertName
                    - Parameters
                    - CustomField10
                    - Priority
                    - TimeResolutionStateLastModified
                    - PrincipalName
                    - AlertState
                    - AlertDescription
                    - TicketId
                    - NetbiosDomainName
                    - ResolutionState
                    - LastModifiedBy
                    - Category
                    - ManagementGroup
                    - AlertSeverity
                    - ConnectorStatus
                    - RuleId
                    - TfsWorkItemId
                    - HostID
                    - MonitoringObjectFullName
                    - AlertParams
                    - DisplayName
                    - TfsWorkItemOwner
                    - TimeResolved
                    - TimeAdded
                    - LastModifiedByNonConnector
                    - NetbiosComputerName
                    - CustomField9
                    - MonitoringObjectPath
                    - Severity
                    - CustomField1
                    - CustomField2
                    - IsMonitorAlert
                    - AlertId
                    - CustomField3
                    - CustomField4
                    - CustomField5
                    - CustomField6
                    - ResolvedBy
                    - CustomField7
                    - CustomField8
                    x-apidog-ignore-properties: []
              x-apidog-orders:
              - alerts
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770221-run
      x-source-url: https://api-docs.bigpanda.io/scom-37770221e0.md
      x-source-page: SCOM
  /oim/sciencelogic/alerts:
    post:
      summary: ScienceLogic
      deprecated: false
      description: Reference payload for ScienceLogic. Shows the well-formed OIM alert payload shape for a ScienceLogic source
        — send it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing ScienceLogic integration in BigPanda; the payload normalizes through that integration's parsing
        rules.
      operationId: postOimSciencelogicAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                severity:
                  type: string
                  format: utc-millisec
                url_to_event:
                  type: string
                  format: uri
                entity_name:
                  type: string
                system_id:
                  type: string
                severity_text:
                  type: string
                event_source:
                  type: string
                ip_address:
                  type: string
                  format: ip-address
                event_category:
                  type: string
                automation_action_name:
                  type: string
                first_event_timestamp:
                  type: string
                  format: utc-millisec
                event_policy:
                  type: string
                event_id:
                  type: string
                  format: color
                event_type:
                  type: string
                event_message:
                  type: string
                user_note:
                  type: string
                last_event_timestamp:
                  type: string
                  format: utc-millisec
                username:
                  type: string
              x-apidog-orders:
              - severity
              - url_to_event
              - entity_name
              - system_id
              - severity_text
              - event_source
              - ip_address
              - event_category
              - automation_action_name
              - first_event_timestamp
              - event_policy
              - event_id
              - event_type
              - event_message
              - user_note
              - last_event_timestamp
              - username
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770220-run
      x-source-url: https://api-docs.bigpanda.io/sciencelogic-37770220e0.md
      x-source-page: ScienceLogic
  /oim/api/preprocess:
    post:
      summary: Send alert events to an OIM integration and shorten the URL.
      deprecated: false
      description: "> ❗ API endpoint\n> \n> This API is called at `integrations.bigpanda.io`\n\nThe Open Integration Manager\
        \ enables you to create custom inbound alert integrations through the configuration of a generic inbound integration\
        \ rather than creating custom code. The integration manager sets parsing rules for incoming payloads, pre-processing\
        \ the content to match incoming data requirements before it reaches the BigPanda enrichment engine.\n\nThis API allows\
        \ you to send OIM payloads to this URL to first shorten the URL through specific tags.\n\n> \U0001F6A7 **Authentication**\n\
        > \n> All BigPanda APIs require Bearer Token Authorization in the call headers.\n>\n> This API uses the Organization\
        \ token type of Authorization token. Your org token must be provided in the header, prefixed by the word `Bearer`.\n"
      operationId: postOimApiPreprocess
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: app_key_h
        in: header
        description: The app key for the associated integration.
        required: true
        example: ''
        schema:
          type: string
          examples:
          - q354h2hn34y
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/oim_alert_preprocessors'
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      security:
      - BearerOrg22: []
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770213-run
      x-source-url: https://api-docs.bigpanda.io/send-alert-events-to-an-oim-integration-and-shorten-the-url-37770213e0.md
      x-source-page: Send alert events to an OIM integration and shorten the URL.
  /oim/api/alerts:
    post:
      summary: Send alert events to an OIM integration.
      deprecated: false
      description: "> \U0001F6A7 **Authentication**\n> \n> All BigPanda APIs require Bearer Token Authorization in the call\
        \ headers.\n>\n> This API uses the Organization token type of Authorization token. Your org token must be provided\
        \ in the header, prefixed by the word `Bearer`.\n>\n> Example:\n> `Authorization: Bearer [YOUR_ORG_TOKEN]`\n\n> \U0001F6A7\
        \ **Incorrect URL in Builder**\n> \n> This endpoint is accessed at the https://integrations.bigpanda.io url, not https://api.bigpanda.io\n"
      operationId: oim-send-alerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: app_key_h
        in: header
        description: The app key for the associated integration.
        required: true
        example: ''
        schema:
          type: string
          examples:
          - q354h2hn34y
      requestBody:
        content:
          application/json:
            schema:
              oneOf:
              - $ref: '#/components/schemas/oim_alert'
              - $ref: '#/components/schemas/multi_alert_payload'
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      security:
      - BearerOrg22: []
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770216-run
      x-source-url: https://api-docs.bigpanda.io/send-alert-events-to-an-oim-integration-37770216e0.md
      x-source-page: Send alert events to an OIM integration.
  /oim/sitescope/alerts:
    post:
      summary: SiteScope
      deprecated: false
      description: Reference payload for SiteScope. Shows the well-formed OIM alert payload shape for a SiteScope source —
        send it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing SiteScope integration in BigPanda; the payload normalizes through that integration's parsing
        rules.
      operationId: postOimSitescopeAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                monitor_uuid:
                  type: string
                alert_description:
                  type: string
                monitor_group:
                  type: string
                web_server_address:
                  type: string
                sitescope_url:
                  type: string
                  format: uri
                first_group_description:
                  type: string
                target_host:
                  type: string
                alert_category:
                  type: string
                monitor_name:
                  type: string
                thresholds:
                  type: array
                  items:
                    type: string
                sitescope_server:
                  type: string
                full_group_name:
                  type: string
                additional_info:
                  type: string
                  format: style
                host:
                  type: string
                classifier:
                  type: string
                full_monitor_name:
                  type: string
                monitor_type_display_name:
                  type: string
                state:
                  type: string
                time:
                  type: string
                  format: style
                category:
                  type: string
                current_time:
                  type: string
                  format: style
                alert_name:
                  type: string
                drill_down_url:
                  type: string
                  format: uri
              x-apidog-orders:
              - monitor_uuid
              - alert_description
              - monitor_group
              - web_server_address
              - sitescope_url
              - first_group_description
              - target_host
              - alert_category
              - monitor_name
              - thresholds
              - sitescope_server
              - full_group_name
              - additional_info
              - host
              - classifier
              - full_monitor_name
              - monitor_type_display_name
              - state
              - time
              - category
              - current_time
              - alert_name
              - drill_down_url
              x--orders:
              - monitor_uuid
              - alert_description
              - monitor_group
              - web_server_address
              - sitescope_url
              - first_group_description
              - target_host
              - alert_category
              - monitor_name
              - thresholds
              - sitescope_server
              - full_group_name
              - additional_info
              - host
              - classifier
              - full_monitor_name
              - monitor_type_display_name
              - state
              - time
              - category
              - current_time
              - alert_name
              - drill_down_url
              x--ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response2'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770222-run
      x-source-url: https://api-docs.bigpanda.io/sitescope-37770222e0.md
      x-source-page: SiteScope
  /oim/sqlsentry/alerts:
    post:
      summary: SolarWinds SQL Sentry
      deprecated: false
      description: Reference payload for SQL Sentry. Shows the well-formed OIM alert payload shape for a SQL Sentry source
        — send it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing SQL Sentry integration in BigPanda; the payload normalizes through that integration's parsing
        rules.
      operationId: postOimSqlsentryAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                Severity:
                  type: string
                Content:
                  type: object
                  properties:
                    Monitor_Type:
                      type: string
                    Debugging_Information:
                      type: object
                      x-apidog-orders: []
                      properties: {}
                      x-apidog-ignore-properties: []
                    Message:
                      type: string
                      format: style
                    Condition_Name:
                      type: string
                    Generated_By:
                      type: string
                    Configured_Object_Name:
                      type: string
                    Monitor_Server_Name:
                      type: string
                    End_Time:
                      type: string
                      format: style
                    Version:
                      type: string
                      format: ip-address
                    Monitor_Object_Description:
                      type: string
                    Monitor_Description:
                      type: string
                    Monitor_Object_Name:
                      type: string
                    Message_Recipients:
                      type: object
                      x-apidog-orders: []
                      properties: {}
                      x-apidog-ignore-properties: []
                    Timestamp_Local:
                      type: string
                      format: style
                    Duration:
                      type: object
                      x-apidog-orders: []
                      properties: {}
                      x-apidog-ignore-properties: []
                    Monitor_Name:
                      type: string
                    Server_Health_Status:
                      type: object
                      x-apidog-orders: []
                      properties: {}
                      x-apidog-ignore-properties: []
                    Monitor_Object_Parent_Name:
                      type: object
                      x-apidog-orders: []
                      properties: {}
                      x-apidog-ignore-properties: []
                    Condition_Description:
                      type: string
                    Timestamp_UTC:
                      type: string
                      format: date-time
                    Filter:
                      type: object
                      x-apidog-orders: []
                      properties: {}
                      x-apidog-ignore-properties: []
                    Response_Ruleset:
                      type: string
                    Links:
                      type: object
                      x-apidog-orders: []
                      properties: {}
                      x-apidog-ignore-properties: []
                    Configured_Object_Type:
                      type: string
                    Event_Time:
                      type: string
                      format: style
                  x-apidog-orders:
                  - Monitor_Type
                  - Debugging_Information
                  - Message
                  - Condition_Name
                  - Generated_By
                  - Configured_Object_Name
                  - Monitor_Server_Name
                  - End_Time
                  - Version
                  - Monitor_Object_Description
                  - Monitor_Description
                  - Monitor_Object_Name
                  - Message_Recipients
                  - Timestamp_Local
                  - Duration
                  - Monitor_Name
                  - Server_Health_Status
                  - Monitor_Object_Parent_Name
                  - Condition_Description
                  - Timestamp_UTC
                  - Filter
                  - Response_Ruleset
                  - Links
                  - Configured_Object_Type
                  - Event_Time
                  x-apidog-ignore-properties: []
                TimeSent:
                  type: string
                  format: date-time
              x-apidog-orders:
              - Severity
              - Content
              - TimeSent
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770223-run
      x-source-url: https://api-docs.bigpanda.io/solarwinds-sql-sentry-37770223e0.md
      x-source-page: SolarWinds SQL Sentry
  /oim/splunk_v2/alerts:
    post:
      summary: Splunk
      deprecated: false
      description: Reference payload for Splunk. Shows the well-formed OIM alert payload shape for a Splunk source — send
        it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing Splunk integration in BigPanda; the payload normalizes through that integration's parsing rules.
      operationId: postOimSplunkV2Alerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{API_TOKEN}'
        schema:
          type: string
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {ORG_BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                app:
                  type: string
                owner:
                  type: string
                results_file:
                  type: string
                results_link:
                  type: string
                  format: uri
                configuration:
                  type: object
                  properties:
                    severity:
                      type: string
                      format: utc-millisec
                    expires:
                      type: string
                    search:
                      type: string
                    trigger_time:
                      type: string
                    cron_schedule:
                      type: string
                    trigger_timeHMS:
                      type: string
                      format: time
                    next_scheduled_time:
                      type: string
                    description:
                      type: string
                    trigger_date:
                      type: string
                      format: date
                    user_agent:
                      type: string
                    status:
                      type: string
                  x-apidog-orders:
                  - severity
                  - expires
                  - search
                  - trigger_time
                  - cron_schedule
                  - trigger_timeHMS
                  - next_scheduled_time
                  - description
                  - trigger_date
                  - user_agent
                  - status
                  x-apidog-ignore-properties: []
                server_host:
                  type: string
                search_uri:
                  type: string
                search_name:
                  type: string
                results:
                  type: array
                  items:
                    type: object
                    properties:
                      Breed:
                        type: string
                      _raw:
                        type: string
                        format: style
                      URL.Link:
                        type: string
                        format: uri
                      Sex:
                        type: string
                      splunk_server:
                        type: string
                      source:
                        type: string
                      _indextime:
                        type: string
                        format: utc-millisec
                      In.Date:
                        type: string
                      host:
                        type: string
                      _sourcetype:
                        type: string
                      sourcetype:
                        type: string
                      search_name:
                        type: string
                      punct:
                        type: string
                        format: style
                      _time:
                        type: string
                        format: utc-millisec
                      timestamp:
                        type: string
                        format: utc-millisec
                      _serial:
                        type: string
                        format: utc-millisec
                      Animal.Type:
                        type: string
                      Pet.Size:
                        type: string
                      Color:
                        type: string
                      _eventtype_color:
                        type: string
                      index:
                        type: string
                      Crossing:
                        type: string
                      splunk_server_group:
                        type: string
                      linecount:
                        type: string
                        format: utc-millisec
                      Pet.Age:
                        type: string
                      _si:
                        type: string
                      Animal.ID:
                        type: string
                      Intake Type:
                        type: string
                      eventtype:
                        type: string
                      Pet.name:
                        type: string
                    x-apidog-orders:
                    - Breed
                    - _raw
                    - URL.Link
                    - Sex
                    - splunk_server
                    - source
                    - _indextime
                    - In.Date
                    - host
                    - _sourcetype
                    - sourcetype
                    - search_name
                    - punct
                    - _time
                    - timestamp
                    - _serial
                    - Animal.Type
                    - Pet.Size
                    - Color
                    - _eventtype_color
                    - index
                    - Crossing
                    - splunk_server_group
                    - linecount
                    - Pet.Age
                    - _si
                    - Animal.ID
                    - Intake Type
                    - eventtype
                    - Pet.name
                    x-apidog-ignore-properties: []
                timestamp:
                  type: string
                  format: utc-millisec
                server_uri:
                  type: string
                  format: uri
                sid:
                  type: string
              x-apidog-orders:
              - app
              - owner
              - results_file
              - results_link
              - configuration
              - server_host
              - search_uri
              - search_name
              - results
              - timestamp
              - server_uri
              - sid
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770231-run
      x-source-url: https://api-docs.bigpanda.io/splunk-37770231e0.md
      x-source-page: Splunk
  /oim/sumologic/alerts:
    post:
      summary: Sumo logic
      deprecated: false
      description: Reference payload for Sumo Logic. Shows the well-formed OIM alert payload shape for a Sumo Logic source
        — send it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing Sumo Logic integration in BigPanda; the payload normalizes through that integration's parsing
        rules.
      operationId: postOimSumologicAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                cluster:
                  type: string
                app_key:
                  type: string
                host:
                  type: string
                link:
                  type: string
                  format: uri
                description:
                  type: string
                check:
                  type: string
                status:
                  type: string
                timestamp:
                  type: string
                  format: style
              x-apidog-orders:
              - cluster
              - app_key
              - host
              - link
              - description
              - check
              - status
              - timestamp
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770224-run
      x-source-url: https://api-docs.bigpanda.io/sumo-logic-37770224e0.md
      x-source-page: Sumo logic
  /oim/thousandeyes/alerts:
    post:
      summary: ThousandEyes
      deprecated: false
      description: Reference payload for ThousandEyes. Shows the well-formed OIM alert payload shape for a ThousandEyes source
        — send it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing ThousandEyes integration in BigPanda; the payload normalizes through that integration's parsing
        rules.
      operationId: postOimThousandeyesAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{app_key}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                eventId:
                  type: string
                alert:
                  type: object
                  properties:
                    severity:
                      type: string
                    dateStartZoned:
                      type: string
                      format: style
                    apiLinks:
                      type: array
                      items:
                        type: object
                        properties:
                          rel:
                            type: string
                          href:
                            type: string
                            format: uri
                        x-apidog-orders:
                        - rel
                        - href
                        x-apidog-ignore-properties: []
                    testLabels:
                      type: array
                      items:
                        type: object
                        properties:
                          name:
                            type: string
                          id:
                            type: integer
                        x-apidog-orders:
                        - name
                        - id
                        x-apidog-ignore-properties: []
                    active:
                      type: integer
                    ruleExpression:
                      type: string
                    dateEnd:
                      type: string
                      format: style
                    type:
                      type: string
                    ruleAid:
                      type: integer
                    agents:
                      type: array
                      items:
                        type: object
                        properties:
                          agentId:
                            type: integer
                          dateStart:
                            type: string
                            format: style
                          active:
                            type: integer
                          agentName:
                            type: string
                          dateEnd:
                            type: string
                            format: style
                          permalink:
                            type: string
                            format: uri
                          metricsAtStart:
                            type: string
                          metricsAtEnd:
                            type: string
                            format: style
                        x-apidog-orders:
                        - agentId
                        - dateStart
                        - active
                        - agentName
                        - dateEnd
                        - permalink
                        - metricsAtStart
                        - metricsAtEnd
                        x-apidog-ignore-properties: []
                    testTargetsDescription:
                      type: array
                      items:
                        type: string
                    violationCount:
                      type: integer
                    dateStart:
                      type: string
                      format: style
                    dateEndZoned:
                      type: string
                    ruleName:
                      type: string
                    testId:
                      type: integer
                    alertId:
                      type: integer
                    ruleId:
                      type: integer
                    permalink:
                      type: string
                      format: uri
                    testName:
                      type: string
                  x-apidog-orders:
                  - severity
                  - dateStartZoned
                  - apiLinks
                  - testLabels
                  - active
                  - ruleExpression
                  - dateEnd
                  - type
                  - ruleAid
                  - agents
                  - testTargetsDescription
                  - violationCount
                  - dateStart
                  - dateEndZoned
                  - ruleName
                  - testId
                  - alertId
                  - ruleId
                  - permalink
                  - testName
                  x-apidog-ignore-properties: []
                eventType:
                  type: string
              x-apidog-orders:
              - eventId
              - alert
              - eventType
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770229-run
      x-source-url: https://api-docs.bigpanda.io/thousandeyes-37770229e0.md
      x-source-page: ThousandEyes
  /oim/tivoli/alerts:
    post:
      summary: Tivoli
      deprecated: false
      description: Reference payload for IBM Tivoli. Shows the well-formed OIM alert payload shape for a IBM Tivoli source
        — send it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing IBM Tivoli integration in BigPanda; the payload normalizes through that integration's parsing
        rules.
      operationId: postOimTivoliAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                alerts:
                  type: array
                  items:
                    type: object
                    properties:
                      situation_name:
                        type: string
                      date:
                        type: string
                      severity:
                        type: string
                      msg:
                        type: string
                      situation_time:
                        type: integer
                      sub_source:
                        type: string
                        format: uri
                      situation_fullname:
                        type: string
                      adapter_host:
                        type: string
                      origin:
                        type: string
                        format: ip-address
                      source:
                        type: string
                      integration_type:
                        type: string
                      situation_thrunode:
                        type: string
                      situation_origin:
                        type: string
                        format: uri
                      situation_status:
                        type: string
                      hostname:
                        type: string
                      situation_type:
                        type: string
                      situation_eventdata:
                        type: string
                      cms_hostname:
                        type: string
                      cms_port:
                        type: string
                        format: utc-millisec
                    x-apidog-orders:
                    - situation_name
                    - date
                    - severity
                    - msg
                    - situation_time
                    - sub_source
                    - situation_fullname
                    - adapter_host
                    - origin
                    - source
                    - integration_type
                    - situation_thrunode
                    - situation_origin
                    - situation_status
                    - hostname
                    - situation_type
                    - situation_eventdata
                    - cms_hostname
                    - cms_port
                    x-apidog-ignore-properties: []
              x-apidog-orders:
              - alerts
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770227-run
      x-source-url: https://api-docs.bigpanda.io/tivoli-37770227e0.md
      x-source-page: Tivoli
  /oim/ariaops/alerts:
    post:
      summary: VMware Aria
      deprecated: false
      description: Reference payload for VMware Aria Operations. Shows the well-formed OIM alert payload shape for a VMware
        Aria Operations source — send it against a test integration's app key to validate the pipeline end to end before connecting
        production traffic. Requires an existing VMware Aria Operations integration in BigPanda; the payload normalizes through
        that integration's parsing rules.
      operationId: postOimAriaopsAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                updateDate:
                  type: string
                cancelDate:
                  type: string
                resourceId:
                  type: string
                adapterKind:
                  type: string
                Health:
                  type: string
                  format: utc-millisec
                impact:
                  type: string
                criticality:
                  type: string
                Risk:
                  type: string
                  format: utc-millisec
                resourceName:
                  type: string
                type:
                  type: string
                recommendations:
                  type: string
                  format: style
                resourceKind:
                  type: string
                Efficiency:
                  type: string
                  format: utc-millisec
                alertName:
                  type: string
                subType:
                  type: string
                alertId:
                  type: string
                alertURL:
                  type: string
                  format: uri
                startDate:
                  type: string
                  format: style
                status:
                  type: string
              x-apidog-orders:
              - updateDate
              - cancelDate
              - resourceId
              - adapterKind
              - Health
              - impact
              - criticality
              - Risk
              - resourceName
              - type
              - recommendations
              - resourceKind
              - Efficiency
              - alertName
              - subType
              - alertId
              - alertURL
              - startDate
              - status
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770225-run
      x-source-url: https://api-docs.bigpanda.io/vmware-aria-37770225e0.md
      x-source-page: VMware Aria
  /oim/zabbix/alerts:
    post:
      summary: Zabbix
      deprecated: false
      description: Reference payload for Zabbix. Shows the well-formed OIM alert payload shape for a Zabbix source — send
        it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
        Requires an existing Zabbix integration in BigPanda; the payload normalizes through that integration's parsing rules.
      operationId: postOimZabbixAlerts
      tags:
      - Alert Ingestion (OIM)
      parameters:
      - name: app_key
        in: query
        description: ''
        required: false
        example: '{APP_KEY}'
        schema:
          type: string
      - name: access_token
        in: query
        description: ''
        required: false
        example: '{ACCESS_TOKEN}'
        schema:
          type: string
      - name: Content-Type
        in: header
        description: ''
        required: false
        example: application/json
        schema:
          type: string
      - name: Authorization
        in: header
        description: ''
        required: false
        example: Bearer {BEARER_TOKEN}
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                eventid:
                  type: integer
                subject:
                  type: string
                  format: style
                trigger_id:
                  type: string
                  format: utc-millisec
                host_dns:
                  type: string
                description:
                  type: string
                  format: style
                source:
                  type: string
                event_opdata:
                  type: integer
                ack_status:
                  type: string
                event_recovery_status:
                  type: string
                nSeverity:
                  type: integer
                scope:
                  type: string
                host:
                  type: string
                alerturl:
                  type: string
                  format: uri
                event_status:
                  type: string
                severity:
                  type: string
                host_description:
                  type: string
                host_ip:
                  type: string
                  format: ip-address
                ci:
                  type: string
                check:
                  type: string
                  format: style
                reg_tags:
                  type: string
                message:
                  type: string
                  format: style
                recovery_status:
                  type: string
                event_recovery_tags:
                  type: string
                zabbixURL:
                  type: string
                  format: uri
                service:
                  type: array
                  items:
                    type: string
                event_value:
                  type: integer
                event_update_status:
                  type: integer
              x-apidog-orders:
              - eventid
              - subject
              - trigger_id
              - host_dns
              - description
              - source
              - event_opdata
              - ack_status
              - event_recovery_status
              - nSeverity
              - scope
              - host
              - alerturl
              - event_status
              - severity
              - host_description
              - host_ip
              - ci
              - check
              - reg_tags
              - message
              - recovery_status
              - event_recovery_tags
              - zabbixURL
              - service
              - event_value
              - event_update_status
              x-apidog-ignore-properties: []
      responses:
        '201':
          x-apidog-ordering: 0
          description: '201'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/generic201response'
          headers: {}
          x-apidog-name: ''
      x-publication-status: live
      x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770226-run
      x-source-url: https://api-docs.bigpanda.io/zabbix-37770226e0.md
      x-source-page: Zabbix
components:
  securitySchemes:
    BearerOrg22:
      type: http
      scheme: bearer
      description: 'Format: "Bearer {Org Token}" BigPanda recommends adding

        [Authentication](https://docs.bigpanda.io/reference/introduction#authentication-and-headers) headers only in the secure
        tool you use to make API calls

        '
  schemas:
    generic201response:
      type: object
      description: 'Call was successful.

        '
      properties:
        status:
          type: integer
          examples:
          - 201
        data:
          type: object
          properties: {}
          x-apidog-orders: []
          x-apidog-ignore-properties: []
      x-apidog-orders:
      - status
      - data
      x-apidog-folder: ''
      examples:
      - status: 201
        data: {}
      x-apidog-ignore-properties: []
    generic201response2:
      type: object
      description: 'Call was successful.

        '
      properties:
        status:
          type: integer
          examples:
          - 201
        data:
          type: object
          properties: {}
          x-apidog-orders: []
          x--orders: []
          x--ignore-properties: []
      x-apidog-orders:
      - status
      - data
      x-apidog-folder: ''
      examples:
      - status: 201
        data: {}
      x--orders:
      - status
      - data
      x--ignore-properties: []
    oim_alert_preprocessors:
      type: object
      properties:
        config:
          type: object
          description: The schema for the integration configuration.
          properties:
            preprocessing:
              type: array
              items:
                $ref: '#/components/schemas/shorten_url'
              description: null
            additional_attributes:
              type: array
              description: Array of payload mapping rules for additional tags.
              items:
                $ref: '#/components/schemas/additional_attributes'
            array_source:
              type: string
              description: Defines which payload property contains the tag values if is_array=true.
              examples:
              - alerts
            is_array:
              type: boolean
              description: Whether the payloads sent to the integration should be treated as single alerts, or multiple.
              examples:
              - true
            map_remaining:
              type: boolean
              description: Whether to create tags from fields not included in the mapping rules.
              examples:
              - false
            map_remaining_flatten_array:
              type: boolean
              description: Whether to flatten arrays to map remaining.
              examples:
              - false
            primary_property:
              type: array
              description: Mapping rule for the primary property.
              items:
                $ref: '#/components/schemas/tag_properties'
              examples:
              - - name: host
                - name: application
                - name: service
            secondary_property:
              type: array
              description: Mapping rule for the secondary property.
              items:
                $ref: '#/components/schemas/tag_properties'
              examples:
              - - name: check
                - name: description
            status:
              $ref: '#/components/schemas/status_mapping'
            bp_timestamp:
              type: object
              description: Defines an optional tag to add a human-readable timestamp.
              properties:
                is_selected:
                  type: boolean
                  examples:
                  - true
              x-apidog-orders:
              - is_selected
              x-apidog-ignore-properties: []
            timestamp:
              type: object
              description: Object that defines mapping rules for the timestamp property.
              properties:
                source:
                  type: array
                  description: The field(s) that contain the timestamp value.
                  items:
                    type: string
                  examples:
                  - - '@alert.annotations.timestamp'
                    - '@alert.startsat'
                    - '@alert.endsat'
              x-apidog-orders:
              - source
              x-apidog-ignore-properties: []
            event_filter:
              type: string
              description: A BPQL statement that dictates which events should be dropped upon initial ingestion (using Source
                Tags).
              examples:
              - '@alert.search_name = "OSS -- MINT Core -- *"'
            incident_identifier:
              type: array
              description: Optional override for the incident identifier.
              items:
                type: string
              examples:
              - - application
                - cluster
            version:
              type: string
              description: The version of the OIM API.
              examples:
              - '2.0'
            is_default:
              type: boolean
              examples:
              - true
          x-apidog-orders:
          - preprocessing
          - additional_attributes
          - array_source
          - is_array
          - map_remaining
          - map_remaining_flatten_array
          - primary_property
          - secondary_property
          - status
          - bp_timestamp
          - timestamp
          - event_filter
          - incident_identifier
          - version
          - is_default
          x-apidog-ignore-properties: []
        sample_payload:
          $ref: '#/components/schemas/sample_payload'
      x-apidog-orders:
      - config
      - sample_payload
      x-apidog-folder: ''
      x-apidog-ignore-properties: []
    sample_payload:
      type: object
      description: An example event payload from the tool that includes all tags that need to be normalized or referred to
        in the schema.
      x-apidog-orders: []
      properties: {}
      x-apidog-folder: ''
      examples:
      - "{  \"sample_payload\": {\n    \"alerts\": [\n      {\n        \"generatorURL\": \"https://some-url.io\",\n      \
        \  \"fingerprint\": \"123456789\",\n        \"annotations\": {\n          \"description\": \"This alert is used to\
        \ check the CPU utilization of this non-existent server\",\n          \"runbook_url\": \"https://runbook.io/cpu-check\"\
        \n        },\n        \"startsAt\": \"2022-07-05T19:59:25.661Z\",\n        \"endsAt\": \"0001-01-01T00:00:00Z\",\n\
        \        \"status\": \"firing\",\n        \"labels\": {\n          \"severity\": \"page\",\n          \"instance\"\
        : \"bigpanda-server\",\n          \"alertname\": \"BigPanda Test\",\n          \"team\": \"metrics\",\n          \"\
        env\": \"test\",\n          \"job\": \"CPU Check\",\n          \"locale\": \"ca\",\n          \"timestamp\": \"1.657051103137505e+09\"\
        \n        }\n      }\n    ],\n    \"commonLabels\": {\n      \"instance\": \"bigpanda-server\",\n      \"alertname\"\
        : \"BigPanda Test\",\n      \"team\": \"metrics\",\n      \"env\": \"test\",\n      \"job\": \"CPU Check\",\n    \
        \  \"locale\": \"ca\",\n      \"timestamp\": \"1.657051103137505e+09\"\n    },\n    \"externalURL\": \"https://external-url.io\"\
        ,\n    \"groupLabels\": {\n      \"instance\": \"bigpanda-server\",\n      \"alertname\": \"BigPanda Test\",\n   \
        \   \"team\": \"metrics\",\n      \"env\": \"test\",\n      \"job\": \"CPU Check\",\n      \"locale\": \"ca\",\n \
        \     \"timestamp\": \"1.657051103137505e+09\"\n    },\n    \"receiver\": \"bigpanda\",\n    \"version\": \"4\",\n\
        \    \"commonAnnotations\": {\n      \"description\": \"This alert is used to check the CPU utilization of this non-existent\
        \ server\",\n      \"runbook_url\": \"https://runbook.io/cpu-check\"\n    },\n    \"status\": \"firing\"\n  }\n"
      x-apidog-ignore-properties: []
    status_mapping:
      type: object
      properties:
        default_to:
          type: string
          examples:
          - critical
          description: The value to populate if no matches are found. `​Critical​​` is default setting.
        source:
          type: array
          items:
            type: string
          examples:
          - - '@alert.status'
            - '@alert.labels.severity'
          description: Is the value in the body or subject?
        status_map:
          type: object
          additionalProperties:
            type: array
            items:
              type: string
          x-apidog-orders: []
          examples:
          - critical:
            - page
            - critical
            warning:
            - warn
            - warning
            acknowledged:
            - acknowledged
            ok:
            - resolved
          description: Defines values that map to assigned statuses. Values will be matched in order, stopping at the first
            match. One of [`critical`, `warning`, `ok`, `acknowledged`]
          properties: {}
          x-apidog-ignore-properties: []
      x-apidog-orders:
      - default_to
      - source
      - status_map
      description: null
      x-apidog-ignore-properties: []
      x-apidog-folder: ''
    tag_properties:
      type: object
      properties:
        name:
          type: string
          description: Optional tag name to use in BigPanda.
          examples:
          - host
      x-apidog-orders:
      - name
      x-apidog-folder: ''
      x-apidog-ignore-properties: []
    additional_attributes:
      type: object
      properties:
        isDestinationAccepted:
          type: boolean
          examples:
          - true
          description: (Optional) Whether the destination tag was accepted.
        isSourceAccepted:
          type: boolean
          examples:
          - true
          description: (Optional) Whether the source tag was accepted.
        isSuggestion:
          type: boolean
          examples:
          - true
          description: (Optional) Whether the tag was suggested by BigPanda Tag Normalization.
        name:
          type: string
          examples:
          - check
          description: (Optional) Set a name for the tag in BigPanda.
        source:
          type: array
          items:
            type: string
          examples:
          - - '@alert.labels.alertname'
            - '@alert.labels.check'
          description: Array of payload fields to match.
        suggestedDestination:
          type: string
          examples:
          - check
          description: Suggested Destination tag name.
        suggestedSources:
          type: array
          items:
            type: string
          examples:
          - - '@alert.labels.alertname'
            - '@alert.labels.check'
          description: Array of payload fields to match for suggested tags.
        flatten:
          type: boolean
          examples:
          - false
          description: (Optional) Whether or not to flatten a nested object for improved mapping.
      x-apidog-orders:
      - isDestinationAccepted
      - isSourceAccepted
      - isSuggestion
      - name
      - source
      - suggestedDestination
      - suggestedSources
      - flatten
      x-apidog-ignore-properties: []
      x-apidog-folder: ''
    shorten_url:
      type: object
      description: Rules for url shortening
      properties:
        id:
          type: string
          description: Type of preprocessor. Must be shortenUrl for URL shortening.
          examples:
          - shortenUrl
        order:
          type: integer
          default: 1
          examples:
          - 1
        params:
          type: object
          properties:
            shortenAll:
              description: If false only shortens url inside tags longer than 512 characters.
              type: boolean
              default: false
          x-apidog-orders:
          - shortenAll
          x-apidog-ignore-properties: []
        tags:
          type: array
          items:
            type: string
            examples:
            - region_group_id
          description: null
          examples:
          - "[\n        \"alert_severity\",\n        \"other\"\n    ]\n"
      x-apidog-orders:
      - id
      - order
      - params
      - tags
      x-apidog-folder: ''
      x-apidog-ignore-properties: []
    multi_alert_payload:
      type: object
      description: Payload structure for multiple alerts.
      properties:
        app_key:
          type: string
          description: Integration app key.
          examples:
          - <APP KEY>
        alerts:
          type: array
          description: Array of alert objects.
          items:
            $ref: '#/components/schemas/oim_alert'
      x-apidog-orders:
      - app_key
      - alerts
      x-apidog-folder: ''
      x-apidog-ignore-properties: []
    oim_alert:
      type: object
      description: OIM single alert payload schema.
      properties:
        app_key:
          type: string
          description: The app key of the integration.
          examples:
          - <app_key>
        status:
          type: string
          description: 'Status of the event. One of: `ok`, `critical`, `warning`, `unknown`, `acknowledged`.

            '
          examples:
          - critical
        timestamp:
          type: integer
          description: Time the event occurred (Unix epoch, seconds).
          examples:
          - 1402303570
        host:
          type: string
          description: Custom event property to tag the alert.
          examples:
          - production-database-1
        check:
          type: string
          description: Custom event property to tag the alert.
          examples:
          - CPU overloaded
        application:
          type: string
          description: Custom event property to tag the alert.
          examples:
          - Billing
        regions:
          type: array
          description: Custom event property as a list.
          items:
            type: string
          examples:
          - - US1
            - US2
            - EMEA
        count:
          type: integer
          description: Custom event property as a number.
          examples:
          - 47
        description:
          type: string
          description: Brief summary of the alert.
          examples:
          - CPU is above warning limit (40%)
      x-apidog-orders:
      - app_key
      - status
      - timestamp
      - host
      - check
      - application
      - regions
      - count
      - description
      x-apidog-folder: ''
      x-apidog-ignore-properties: []
x-server-notes:
- US host https://api.bigpanda.io verified live 2026-09-04 (HTTP 401 Authorization Required on an unauthenticated request).
- EU host https://api.eu.bigpanda.io is the value BigPanda publishes at https://api-docs.bigpanda.io/regions. It did NOT resolve
  in DNS on 2026-09-04. The live EU host observed on that date is https://eu-api.bigpanda.io (401 Authorization Required).
  The per-endpoint fragments on the same site declare a third EU value, https://eu-api.biggy.io, which also does not resolve.
  Recorded as published; not corrected.