According to the documentation https://kb.energylogserver.com/en/latest/06-SIEM_Plan/06-SIEM_Plan.html?highlight=command#command we can do this using a command alert and a sample sh script (the alert user must have access to the specified location):
alert: "command"
command: ["/opt/alert/send_request_change.sh", "5", "%(hostname)s", "SYSTEM_DOWN", "HOST", "Application Collection", "%(hoststate)s", "%(@timestamp)s"]
The example script may include:
curl -XPOST 'https://$ARG1:8080/ticketsystem/$ARG2'
and the arguments will be substituted based on the values in the document.
