Webhooks are notifications that Unit21 sends when an event occurs on your platform.

From the Webhooks pane of the Unit21 UI, you can configure what events trigger a webhook, along with the endpoints where notifications are sent.

For example, this webhook sends notifications about any alert activity to a specially designated endpoint.

How to create a webhook

  1. Go to System>Webhooks, then click Create a Webhook.
  2. Add the Endpoint URL you want to send your webhooks to.
  3. Add the webhook events that trigger your webhook. For a description of the events, see the event reference in the following section.

The following list outlines the objects available for Unit21 webhooks, and briefly describes the events that trigger each webhook.


Action TypeWebhook Trigger
ALERT_CREATEDWhen an alert is triggered
ALERT_REOPENEDWhen an agent re-opens a previously closed alert
ALERT_CLOSEDWhen an alert is closed
ALERT_ACTION_TRIGGEREDWhen an agent clicks an alert's action buttons
ALERT_GENERATION_LIMIT_HITWhen the alert generation limit has been hit
ALERT_COMPONENT_ACTION_TRIGGEREDWhen alert component action buttons are clicked via the alert detail pane


Action TypeWebhook Trigger
CASE_CREATEDWhen a case is created
CASE_REOPENEDWhen a previously closed case is re-opened
CASE_CLOSEDWhen a case is closed
CASE_ACTION_TRIGGEREDWhen a case action runs


Action TypeWebhook Trigger
ENTITY_ACTION_TRIGGEREDWhen an entity action runs (executed from an entity's details pane)
ENTITY_FLAGGEDWhen an entity is flagged

Rules / Models:

Action TypeWebhook Trigger
RULE_TRIGGEREDWhen a rule is executed
RULE_CREATEDWhen an agent deploys a rule

File Exports:

Action TypeWebhook Trigger
FILE_EXPORT_READYWhen an export is ready

Test your webhook

After you create a webhook, you can send a test request. If a request fails, Unit21 tries to resend the webhook. However, Unit21 sends a maximum of three requests.