Generic webhook notifications

Generic outbound webhooks are live and self-service on every plan. They send HowlOps event JSON to an HTTPS endpoint; they are different from incoming integrations that create HowlOps alerts.

Set it up

1. Expose a public HTTPS endpoint that accepts POST application/json and returns a 2xx response promptly.
2. Open Integrations → Channels → Generic webhook, enter the URL, and preferably generate a strong signing secret.
3. Verify X-HowlOps-Signature over the raw request body, save, and send a test.

The channel sends test, incident-open, update, and recovery events allowed by its filters. It does not poll your endpoint or infer success from response content. URLs are screened against private-network and unsafe destinations.

Security and troubleshooting

Store the signing secret in a secret manager. Rotate by changing it at both ends during a controlled window; there is no dual-secret overlap. Make processing idempotent and queue work before returning 2xx. For fields, examples, signature code, and retry expectations, see the webhook reference. Check endpoint logs and Notification delivery log for non-2xx responses or timeouts.