How to remove duplicate webhooks after upgrading to vRealize Log Insight 8.4

Products

• VMware Aria Suite

Issue/Introduction

Symptoms:

• After upgrading to vRealize Log Insight 8.4, you observe that webhooks are decoupled from alerts to allow customization of the webhook body, which resulted in individual webhooks being created for each of the existing alerts

Environment

VMware vRealize Log Insight 8.4.x
VMware vRealize Log Insight 8.5.x
VMware vRealize Log Insight 8.6.x

Resolution

This behavior is by design starting with vRealize Log Insight 8.4.

Workaround:
If this is causing an inconvenience, please follow the beneath steps to remove the duplication:

1. Take a snapshot of all nodes in the vRealize Log Insight cluster
2. Download the cqlsh-no-pass file attached to this article and replace it over the existing file in /usr/lib/loginsight/application/lib/apache-cassandra-3.xx.xx/bin/ on the primary node, using a utility like WinSCP or Filezilla

Note: The version of apache will vary based on the version of Log Insight you are running. If you see directories for multiple versions, choose the highest one.

1. Download the merge_duplicate_webhooks.sh script attached to this article and upload it to the /tmp directory on the primary node
2. SSH to the primary node as root

Note: If you do not know, or have forgotten your root password, please refer to How to reset the root password in vRealize Log Insight (53649)

5. Run the following command to add executable permissions to the script

chmod +x /tmp/merge_duplicate_webhooks.sh

6. Execute the script by running the following command

/tmp/merge_duplicate_webhooks.sh

Note: The script should end with a successful status code.  If not, please file a support request with VMware Technical Support