From e3e5438db4e86e561ad5fa4bb73b5c4905b9a704 Mon Sep 17 00:00:00 2001
From: Patrick Toal <ptoal@takeflight.ca>
Date: Wed, 17 Apr 2024 14:01:23 -0400
Subject: [PATCH] Update playbook to talk to SNOW

---
 playbooks/investigate_high_cpu.yml  | 19 ++++++++++++++++---
 rulebooks/alertmanager_listener.yml |  1 -
 2 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/playbooks/investigate_high_cpu.yml b/playbooks/investigate_high_cpu.yml
index f4ea349..d3d0886 100644
--- a/playbooks/investigate_high_cpu.yml
+++ b/playbooks/investigate_high_cpu.yml
@@ -7,12 +7,25 @@
       ansible.builtin.command:
         cmd: 'ps -eo pid,ppid,%mem,%cpu,cmd --sort=-%cpu'
       register: processes_cpu
+      changed_when: false
 
     - name: Gather information on top Memory consuming processes
       ansible.builtin.command:
         cmd: 'ps -eo pid,ppid,%mem,%cpu,cmd --sort=-%mem'
       register: processes_mem
+      changed_when: false
 
-    - name: Dump CPU details
-      ansible.builtin.debug:
-        msg: "{{ lookup('template','../templates/cpuhog_ticket.j2') }}" 
\ No newline at end of file
+    - name: Create Problem Template
+      ansible.builtin.set_fact:
+        incident_report: "{{ lookup('template', '../templates/cpuhog_ticket.j2') }}"
+
+    - name: Create SNow Incident
+      servicenow.itsm.incident:
+        state: new
+        caller: "admin"
+        short_description: "CPUHog event detected on: {{ event.alert.labels.instance }}"
+        description: "A CPUHog was detected on: {{ event.alert.labels.instance }} that needs to be investigated."
+        impact: high
+        urgency: high
+      delegate_to: localhost
+        
\ No newline at end of file
diff --git a/rulebooks/alertmanager_listener.yml b/rulebooks/alertmanager_listener.yml
index 21cf8aa..9a3f419 100644
--- a/rulebooks/alertmanager_listener.yml
+++ b/rulebooks/alertmanager_listener.yml
@@ -40,7 +40,6 @@
                 alertmanager_generator_url: "{{ event.alert.generatorURL }}"
                 event_severity: "{{ event.alert.labels.severity }}"
                 alertmanager_instance: "{{ event.alert.labels.instance }}"
-                event_values: "{{ event.alert.values }}"
 
     - name: Test Contact Point
       condition: event.alert.labels.alertname == "TestAlert" and event.alert.labels.org == "OYS"