Documentation Index
Fetch the complete documentation index at: https://docs.corelayer.com/llms.txt
Use this file to discover all available pages before exploring further.
Prerequisites
- Permission to add integrations in Corelayer
- A monitoring or alerting tool that can send HTTP POST requests
- Access to run
curl, Postman, or another HTTP client from the same network as your alert sender
Step-by-Step Setup
1. Navigate to Integrations
In your Corelayer dashboard, go to the Integrations page.2. Add Custom Webhook
Click the Add Integration button and select Custom Webhook from the list of available integrations. Enter a name for the alert source, such asGrafana Production, Alertmanager, or Internal Monitor.
3. Copy the Webhook Details
Corelayer will generate:- A webhook URL
- A bearer token
- A sample alert payload
- A ready-to-copy
curlcommand
4. Verify the Webhook
Run the generatedcurl command from a machine that can reach the webhook endpoint. For customer-hosted Corelayer deployments, this can be a machine inside your private network.
Corelayer marks the webhook as verified after it receives a valid test request.
5. Configure Your Alert Sender
Configure your monitoring tool to send alert payloads to the webhook URL. Include the bearer token in theAuthorization header:
Alert Payload Format
Custom Webhook expects a canonical JSON alert payload.Required Fields
| Field | Description |
|---|---|
id | Unique alert identifier from your alerting system |
action | Alert action: trigger, resolve, or acknowledge |
time | Alert timestamp as a valid date string |
name | Short alert name |
message | Alert message or summary |
Optional Fields
| Field | Description |
|---|---|
description | Longer alert details |
severity | critical, high, medium, low, or info. Defaults to info |
source | Name of the alerting system |
sourceUrl | Link back to the alert in the source system |
fingerprint | Stable deduplication key for repeated alerts |
labels | Key-value labels such as service, environment, region, or team |
How Corelayer Handles Alerts
When Corelayer receives a valid alert:triggeralerts start a Corelayer investigation.- Duplicate
triggeralerts with the same fingerprint are accepted but ignored for a short deduplication window. resolveandacknowledgealerts are accepted and recorded, but do not automatically close Corelayer issues yet.
Managing Webhooks
You can create multiple Custom Webhook sources from the Custom Webhook integration page. For each source, you can:- Copy the webhook URL
- Reset the bearer token
- Reverify the webhook after a token reset
- Enable or disable the webhook
- Delete the webhook source
Customer-Hosted Deployments
For customer-hosted Corelayer deployments, the webhook URL should point to the Corelayer server in your environment. The endpoint does not need to be publicly reachable if your alert sender is also inside your network. It only needs to be reachable from the system sending the alerts. If you use a cloud-hosted alerting tool, such as Grafana Cloud or Datadog, make sure the webhook endpoint is reachable from that service.Troubleshooting
Verification Does Not Complete
- Confirm the generated
curlcommand was run against the exact webhook URL shown in Corelayer - Confirm the bearer token was copied correctly
- Confirm your request includes
Content-Type: application/json - For private deployments, run the test from a machine that can reach the customer-hosted Corelayer server
Webhook Returns 401
The bearer token is missing or incorrect. Reset the token in Corelayer, update your alert sender, and run the generated reverify command.Webhook Returns 403
The webhook may be disabled. Open the Custom Webhook integration page and enable the webhook source.Webhook Returns 400
The JSON payload is malformed or does not match the required alert schema. Check the required fields and supportedaction and severity values.
Need help? Contact support for assistance with your Custom Webhook integration.