Skip to content

feat: add SolarWinds provider integration#5642

Open
285729101 wants to merge 1 commit intokeephq:mainfrom
285729101:feat/solarwinds-provider
Open

feat: add SolarWinds provider integration#5642
285729101 wants to merge 1 commit intokeephq:mainfrom
285729101:feat/solarwinds-provider

Conversation

@285729101
Copy link

@285729101 285729101 commented Feb 17, 2026

Closes #5649

Summary

  • Adds a new SolarWinds Orion provider for Keep, enabling alert ingestion from the SolarWinds monitoring platform
  • Uses the SWIS (SolarWinds Information Service) REST API to query active alerts via SWQL
  • Supports both pull-based alert fetching and webhook-based alert ingestion

Details

Authentication

  • Username/password authentication against SolarWinds Orion server
  • Configurable SSL certificate verification (for self-signed certs)

Alert Fetching (Pull)

  • Queries Orion.AlertActive joined with Orion.AlertObjects and Orion.AlertConfigurations for comprehensive alert data
  • Maps SolarWinds severity levels (Informational, Warning, Critical, Notice) to Keep's severity model
  • Maps acknowledgement status to Keep's alert status model

Webhook Support (Push)

  • Static _format_alert method handles incoming webhook payloads from SolarWinds
  • Supports both SolarWinds-native field names and generic Keep field names

Files Added

  • keep/providers/solarwinds_provider/solarwinds_provider.py - Main provider implementation
  • keep/providers/solarwinds_provider/alerts_mock.py - Mock alert data for simulation
  • keep/providers/solarwinds_provider/__init__.py - Package init
  • keep-ui/public/icons/solarwinds-icon.png - Provider icon for UI

Test plan

  • Verify provider loads correctly in the Keep UI provider list
  • Test authentication with a SolarWinds Orion instance
  • Test alert pulling from SolarWinds via SWIS API
  • Test webhook alert ingestion with sample SolarWinds payloads
  • Verify severity and status mappings are correct

/claim #3526

🤖 Generated with Claude Code

Add a new provider for SolarWinds Orion monitoring platform that allows
ingesting alerts into Keep via the SWIS (SolarWinds Information Service)
REST API.

- Provider with username/password authentication against SolarWinds Orion
- Alert fetching via SWQL queries against Orion.AlertActive
- Webhook support for receiving pushed alerts from SolarWinds
- Severity and status mapping to Keep's alert model
- Scope validation for connectivity and alert read permissions
- Mock alerts for simulation
- Provider icon for the UI

Closes keephq#3526
@vercel
Copy link

vercel bot commented Feb 17, 2026

@285729101 is attempting to deploy a commit to the KeepHQ Team on Vercel.

A member of the Team first needs to authorize it.

@dosubot dosubot bot added the size:XL This PR changes 500-999 lines, ignoring generated files. label Feb 17, 2026
@CLAassistant
Copy link

CLAassistant commented Feb 17, 2026

CLA assistant check
All committers have signed the CLA.

@greptile-apps
Copy link
Contributor

greptile-apps bot commented Feb 17, 2026

Target branch is not in the allowed branches list.

@dosubot dosubot bot added Feature A new feature Provider Providers related issues labels Feb 17, 2026
@285729101 285729101 force-pushed the feat/solarwinds-provider branch from 81304ab to 29ff420 Compare February 17, 2026 16:46
@285729101
Copy link
Author

@talboren @Matvey-Kuk adds SolarWinds provider integration for pulling alerts via Orion API.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🙋 Bounty claim Feature A new feature Provider Providers related issues size:XL This PR changes 500-999 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat: Add SolarWinds monitoring provider integration

2 participants