Set up Prometheus Alertmanager ingestion

What you will configure

• Generate an Alertmanager token in HowlOps
• Add HowlOps as a webhook_configs receiver in alertmanager.yml
• Verify a real alert flows through to a HowlOps incident

Time: ~5 minutes · Requires: a running Prometheus Alertmanager. Works on any plan, including Free On-call — external alert ingestion is free.

Step 1 — Generate an Alertmanager token

1. In HowlOps go to Settings → Integrations.
2. Open Prometheus / Alertmanager and click Generate token.
3. Copy the token — it starts with amtok_. You only see it once.

Step 2 — Add the HowlOps receiver to alertmanager.yml

receivers:
  - name: howlops
    webhook_configs:
      - url: 'https://api.howlops.com/api/v1/webhook/alertmanager'
        send_resolved: true
        http_config:
          authorization:
            type: Bearer
            credentials: 'amtok_YOUR_TOKEN_HERE'

send_resolved: true lets HowlOps auto-close the incident when the alert clears.

Step 3 — Route alerts to HowlOps

route:
  receiver: howlops
  group_by: ['alertname']
  group_wait: 10s
  group_interval: 30s
  repeat_interval: 4h

Reload Alertmanager:

curl -X POST http://localhost:9093/-/reload

Step 4 — Test it

Fire a test alert straight into the Alertmanager API:

curl -X POST http://localhost:9093/api/v2/alerts \
  -H 'Content-Type: application/json' \
  -d '[{"labels":{"alertname":"HowlOpsTest","severity":"critical","instance":"web-01"},
        "annotations":{"summary":"Test alert from the HowlOps setup guide"},
        "startsAt":"2026-06-29T10:30:00Z"}]'

Within a few seconds the alert appears under Incidents in HowlOps with severity critical.

Severity mapping

The Alertmanager severity label maps to the HowlOps incident severity:

Troubleshooting

• No incident appears — confirm Alertmanager can reach api.howlops.com and the token is correct (regenerate if unsure). Check docker logs/Alertmanager logs for a 401.
• Alert never resolves — make sure send_resolved: true is set; HowlOps matches the resolve to the open incident by the alert fingerprint.

See also

• Integrations reference
• Alert & incident flow