Outbound webhook
POST signed JSON alert payloads to your HTTPS endpoint. NiteWtch signs the body with your shared secret in the X-Nite-Signature header. This is alert delivery to your URL — not inbound webhook ingest for sending alerts into NiteWtch.
Steps
- Open Notification Channels → Webhook → Enabled.
- Enter your HTTPS URL (must accept POST).
- Set a signing secret (required on first enable). Rotate by entering a new secret and saving.
- Optional: set max retries and backoff milliseconds for transient failures.
- Filter by severity, alert source, and/or event type — leave sources empty for all sources.
- Click Test to send a sample payload, then Save Notification Channels.
- Verify your receiver checks X-Nite-Signature before trusting the JSON body.
Common mistakes
- Using HTTP instead of HTTPS for production endpoints.
- Skipping signature verification on your side — treat the secret like a password.
- Forgetting to save after rotating the secret.