Microsoft Teams notification messages

This page describes the messages Sifflet posts to Microsoft Teams. To connect a Teams channel, see Microsoft Teams. To choose which monitors notify which channels, see Notification rules.

Incident messages

Message	When it is sent
Incident created	A new incident has been opened. The message shows the monitor that opened it.
Incident updated	A monitor was added to an incident that already existed.
Incident closed	The incident is closed. It is posted to every channel the incident has notified.

Incident created and Incident updated messages include the monitor's custom notification message, if it has one, and a link to the monitor's failing rows when they are available. For monitors with a group-by, the message lists up to 10 failing dimensions, each linking to its failing rows, and links to the monitor for the others.

Monitor messages

These messages are sent when a monitor is not tied to an incident.

Message	When it is sent
Monitor failure	A monitor run failed its threshold.
Monitor needs attention	A run could not reach a verdict: a technical error, or a run that requires a human look.
Monitor recovered	The monitor is passing again, after failing or needing attention.

Differences with Slack

Messages are not edited in place. Closing an incident or a monitor recovering posts a new message.
Assignment notifications are sent by email only.
Successful monitor runs (MONITOR_SUCCESS) are sent to webhooks only.

See the Notification catalog for the complete list.