New Relic

You can configure a Lacework alert channel to forward alerts to New Relic using the Insights API. To configure Lacework to forward events, you need your New Relic account ID and Insert key.

To help ensure security, New Relic recommends using different Insert keys for different applications or different data sources. Lacework concurs with this approach.

Add an Insert Key

1. Go to insights.newrelic.com > Manage data > API keys.
2. From API key management, select the symbol next to the Insert keys heading.
3. Enter a short description about the key.
4. Select Save your notes.

For more information about sending custom data to Insights, refer to New Relic documentation: Insert custom events via the Insights API.

Create a Lacework Alert Channel

After you have your account ID and an Insert key, return to the Lacework Console and complete the following steps:

1. Log in to the Lacework Console with a Lacework user that has administrative privileges.
2. Navigate to Settings > Alert Routing > Alert Channels.
3. Click + Create New.
4. Select New Relic.
5. Name the channel.
6. Add your New Relic Insert key.
7. Add your New Relic account ID.
8. Click Save.
9. Click Alert Rules and configure your required alert routing details/options by leveraging the alert channel you created.

You should now start to receive Lacework alert notifications in Insights.

Create a Lacework New Relic Insights Alert Channel Using Terraform

For organizations using Terraform to manage their environments, Lacework maintains the Terraform Provider for Lacework which enables configuration of Lacework Alert Channels using automation.

If you are new to the Lacework Terraform Provider, or Lacework Terraform Modules, read the Terraform for Lacework Overview to learn the basics on how to configure the provider, and more.

For a complete list of custom Terraform resources to manage alert channels in Lacework, see Managing Alert Channels with Terraform.

# Configure New Relic Alert Channel in Lacework
resource "lacework_alert_channel_newrelic" "example" {
  name       = "My New Relic Channel Alert Example"
  account_id = 2338053
  insert_key = "x-xx-xxxxxxxxxxxxxxxxxx"
}

Additional information on the lacework_alert_channel_newrelic resource can be found on the Terraform Registry.