Closes #5649

Summary

• Adds a new SolarWinds Orion provider for Keep, enabling alert ingestion from the SolarWinds monitoring platform
• Uses the SWIS (SolarWinds Information Service) REST API to query active alerts via SWQL
• Supports both pull-based alert fetching and webhook-based alert ingestion

Details

Authentication

• Username/password authentication against SolarWinds Orion server
• Configurable SSL certificate verification (for self-signed certs)

Alert Fetching (Pull)

• Queries Orion.AlertActive joined with Orion.AlertObjects and Orion.AlertConfigurations for comprehensive alert data
• Maps SolarWinds severity levels (Informational, Warning, Critical, Notice) to Keep’s severity model
• Maps acknowledgement status to Keep’s alert status model

Webhook Support (Push)

• Static _format_alert method handles incoming webhook payloads from SolarWinds
• Supports both SolarWinds-native field names and generic Keep field names

Files Added

• keep/providers/solarwinds_provider/solarwinds_provider.py - Main provider implementation
• keep/providers/solarwinds_provider/alerts_mock.py - Mock alert data for simulation
• keep/providers/solarwinds_provider/__init__.py - Package init
• keep-ui/public/icons/solarwinds-icon.png - Provider icon for UI

Test plan

• Verify provider loads correctly in the Keep UI provider list
• Test authentication with a SolarWinds Orion instance
• Test alert pulling from SolarWinds via SWIS API
• Test webhook alert ingestion with sample SolarWinds payloads
• Verify severity and status mappings are correct

/claim #3526

🤖 Generated with Claude Code