ADD WEBHOOK
-
Navigate to Administration > Webhooks in the left navigation pane
-
Click ADD WEBHOOK
-
Provide the below information
Parameter
Description
Enable
On – Webhook is added and enabled to receive incidents notification
Off – Webhook is added, but will not receive the incidents notification
Name
Name of the Webhook
Description
A short description of the Webhook
Webhook URL
Rest API URL to be configured. (Currently POST and GET methods are supported)
Content Type
Currently the only supported format is JSON
Incident Filter
The webhook can be configured for all incidents or specific incidents based on
- Severity – Threats, Attacks or notifications
- Application – Select the required Applications
- Host – Select the required Hosts
- Category – Web Attack, Fileless Attack, Authentication Failures, File Integrity Failures
- Type – Vulnerability types
- Action – Protection Action is triggered or not
Authentication
Provide the authentication information of the API
- None – No authentication
- Basic – Only username and password required
- API Key – Provide the token
HTTP Headers
Key – Select the key from the drop-down
Value – Provide the corresponding value
Multiple Key-Value pairs can be added
Body
Provide the JSON format expected by the API. Utilize the parameters listed on the page
Table – Process Incidents
-
Click TEST to verify the configuration
-
Click SAVE