Skip to content

How to Configure the Webhook Notifier#

This topic provides step-by-step instructions for configuring the webhook notifier in TheHive.

Notifier availability

The webhook notifier is available only when you turn off the Send notification to every user in the organization toggle and use one of the following triggers: - AnyEvent
- FilteredEvent
- ActionFinished
- CaseClosed
- CaseCreated
- CaseFlagged
- CaseShared
- AlertClosed
- AlertCreated
- AlertImported
- JobFinished
- AlertObservableCreated
- CaseObservableCreated
- ObservableCreated
- TaskClosed
- TaskMandatory

Required permissions

Only users with the manageConfig permission can manage notifications in TheHive.

Procedure

  1. Go to the Organization view from the sidebar menu.

    Organization view

  2. Select the Notifications tab.

    Notifications tab

  3. Select and then Edit.

  4. Select the Webhook notifier.

  5. In the Webhook drawer, select an existing endpoint.

    Using a webhook as a notifier requires at least one endpoint. This endpoint defines how TheHive connects to the webhook.

    Endpoints can be local, defined at the organization level, or global, defined at the client level for one or more organizations.

    You can add a new local endpoint by selecting Add a new endpoint.

  6. Select Confirm.

Next steps