Egress and notifications

Where playbook outcomes and notifications can go.

Channels

Configure channels as integrations of type egress in Settings › Integrations, then reference them from a playbook's Notify block or from notification preferences.

ChannelNotes
WebhookJSON payload, optional HMAC signature header so the receiver can verify origin.
SlackIncoming webhook or bot token.
Microsoft TeamsIncoming webhook.
DiscordIncoming webhook.
EmailSMTP with TLS.
JiraCreates an issue in a project with fields mapped from the alert.
TheHiveCreates an alert or case.
Upstream SIEMForwards the alert as an event to another SIEM's HTTP or HEC listener.

Templates

Each Notify block has a message template with alert fields available as placeholders. Templates are per block, so the message to the on-call channel can differ from the message to the customer's ticket.

Delivery

Failed deliveries are retried with backoff, and every attempt is recorded. Notifications › Delivery shows what was sent, where, and whether it succeeded.