Outgoing webhooks for Grafana IRM

Outgoing webhooks send HTTP POST requests from Grafana IRM to external systems when configured events occur. They enable real-time data transmission, custom formatting, and automated workflows between your incident response process and third-party tools.

Available webhook types

Grafana IRM offers two distinct outgoing webhook types:

OnCall outgoing webhooks

OnCall outgoing webhooks focus on alert group events with:

Flexible Jinja2 templates for custom payload formatting
Integration with escalation chains
Multiple authentication options (Basic, Authorization header)
Access to alert group context data for customization
Trigger options for notification-related events

Best for: Alert notification workflows requiring custom payload formatting.

Incident outgoing webhooks

Incident outgoing webhooks focus on incident lifecycle events with:

Fixed JSON payload format following CloudEvents specification
HMAC-SHA256 signature verification for security
Filtering based on incident properties (severity, status, roles, labels)
Detailed incident data including roles, tasks, and timeline information

Best for: Integration with systems tracking incident lifecycle and status changes.

Key use cases

Ticketing systems: Auto-create tickets in Jira, ServiceNow, or Zendesk
Communication: Send formatted alerts to Slack or Microsoft Teams
Automation: Trigger custom scripts or workflow tools
Synchronization: Update external databases or status pages
Compliance: Send incident data to audit and tracking systems

Best practices

Security: Always implement proper verification (signatures or authentication)
Reliability: Design webhook endpoints to handle retries and duplicates
Performance: Keep handlers efficient (OnCall webhooks timeout after 4 seconds)
Monitoring: Log webhook execution for troubleshooting
Filtering: Target only necessary events to reduce noise