Notifications (Webhooks)
Webhook can be configured to forward alerts to 3rd party systems.
Webhooks are a flexible and efficient means of integrating Keystrike with SIEM platforms, or messaging solutions such as Slack or Teams, enhancing real-time monitoring and response capabilities.
Webhooks are a way to provide other applications with alerts in real-time. A webhook delivers data to different applications as they happen, delivering alerts immediately, unlike typical APIs where you would need to poll for data very frequently to get them in near-real-time.
Webhooks are configured in Configuration / Notifications in the admin panel. To configure one, provide the URL to where you want alerts sent.
Webhooks are sent using the HTTP POST method with a JSON payload.
Here is more information on how to create an incoming webhook for some target systems:
- Slack
- Datadog
- Splunk