PUT _xpack/watcher/watch/Integrations.CRMDecorator.LeadsNotFoundInCRM/
{
"trigger": {
"schedule": {
"interval": "20m"
}
},
"input": {
"search": {
"request": {
"search_type": "query_then_fetch",
"indices": [
"logstash-*"
],
"types": [
"logevent"
],
"body": {
"query": {
"bool": {
"must": [
{
"match": {
"level": "Error"
}
},
{
"match": {
"fields.ApplicationName": "LeadProcessors"
}
},
{
"match": {
"message": {
"query": {
"match_phrase_prefix": "System.Exception: CRMRepository.CreatePostLead failed for LeadId:"
}
}
}
}
]
}
},
"sort": [
{
"@timestamp": "desc"
}
],
"filter": {
"range": {
"@timestamp": {
"from": "now-20m",
"to": "now"
}
}
}
}
}
}
},
"condition": {
"script": {
"inline": "if (ctx.payload.aggregations.minutes20.buckets.size() == 0) return false;def latest = ctx.payload.aggregations.minutes20.buckets[-1]; return latest.occurences.buckets.anyMatch(it->it.doc_count > 0);",
"lang":"painless"
}
},
"actions": {
"send_email": { "email": {
"profile": "standard",
"attach_data": {
"format": "json"
},
"from": "noreply-watcher@ABC.edu",
"to": [
"vkumar@ABC.edu",
"ppabolu@ABC.edu"
],
"subject": "QCE leads not found in CRM",
"body": {
"html": {
"inline": "<h1>LG: QCE (Quick Contact Entry) leads not found in CRM</h1><p>View the dashboard <a href=\"http://elc.dashboard.ABCcorp.com/app/kibana#/dashboard/LeadsGateway-CRM-Decorator-LeadsNotFoundInCRM?_g=(refreshInterval:(display:Off,pause:!f,value:0),time:(from:'{{ctx.vars.from}}',mode:absolute,to:'{{ctx.trigger.triggered_time}}'))\">here</a>.</p><p>These errors are associated with the leads which originated from CRM (aka, QCE – Quick Contact Entry). When a lead is posted to Leads Gateway from the CRM before it has been fully committed (saved) into CRM, or if QCE was deleted in CRM shortly after it has been posted to LG, the Leads Processor (CRMDecorator) will be unable to get the needed lead data and will throw this error. After 10 retries (with delays in between) the lead will be put into a Dead Letter queue. The lead will have to be deleted from DL queue, and re-entered into CRM if there has not been another QCE already successfully entered by that time.</p><table border='1'><th>Occurences</th><th>InnerMessage</th>{{#ctx.payload._value}}<tr><td>{{doc_count}}</td><td>{{key}}</td></tr>{{/ctx.payload._value}}</table>"
}
}
}
}
},
"_status": {
"state": {
"active": true,
"timestamp": "2017-09-10T09:11:11.139Z"
},
"actions": {
"send_email": {
"ack": {
"timestamp": "2017-02-10T16:41:44.121Z",
"state": "awaits_successful_execution"
}
}
},
"last_checked": "2017-09-10T01:21:09.832Z"
}
}