Grafana alerting webhook

Firing and resolved alerts from a Grafana webhook contact point, grouped into one event.

Setup

1. In PingLoom open Webhooks, choose New webhook source, pick Grafana alerting and create it. Copy the endpoint URL and the signing secret.
2. In Grafana open Alerting, Contact points, Add contact point and choose the Webhook integration.
3. Paste the endpoint URL into URL. Under Optional Webhook settings open HMAC signature, paste the signing secret into Secret and keep the signature header at X-Grafana-Alerting-Signature.
4. Set Timestamp header to X-Grafana-Alerting-Timestamp.
5. Save, press Test, then point a notification policy at the contact point.

Verification

Grafana's optional HMAC signature is HMAC-SHA256 in X-Grafana-Alerting-Signature, hex-encoded. If you also set a timestamp header, the signed text is timestamp:body and PingLoom rejects requests more than five minutes old. Without the timestamp header the signature still verifies, but a captured request could be replayed.

Events

You choose which events become alerts when you create the source, and you can change it later on the source page.