Grafana alerting webhook payload example

Grafana · event: alert group firing · content type: application/json

This is a representative sample — fake IDs, real structure. To see a payload with your data, point the provider at a capture URL (button below).

See it live, not frozen

One click creates a free capture bin with this exact payload already in it — pretty-printed, headers inspectable, replayable to your own endpoint:

Then paste the bin's URL into Grafana's webhook settings to capture a real delivery. No signup.

Headers

content-type: application/json
x-grafana-alerting-signature: e5baf0f180cf0d4dba7d7446718bb836fe24845fd54571cb8e4096ecc07646be

Body

{
  "receiver": "Hookden webhook",
  "status": "firing",
  "orgId": 1,
  "alerts": [
    {
      "status": "firing",
      "labels": {
        "alertname": "High memory usage",
        "instance": "api-01",
        "team": "platform"
      },
      "annotations": {
        "description": "Memory usage above 90% for 5 minutes",
        "runbook_url": "https://runbooks.acme.dev/high-memory",
        "summary": "api-01 memory at 93%"
      },
      "startsAt": "2026-08-29T19:25:00.000Z",
      "endsAt": "0001-01-01T00:00:00Z",
      "generatorURL": "https://grafana.acme.dev/alerting/grafana/bdx29v7z/view",
      "fingerprint": "c6eadffa33fcdf37",
      "silenceURL": "https://grafana.acme.dev/alerting/silence/new?alertmanager=grafana&matchers=alertname%3DHigh+memory+usage%2Cinstance%3Dapi-01",
      "dashboardURL": "",
      "panelURL": "",
      "values": {
        "B": 93.4,
        "C": 1
      }
    }
  ],
  "groupLabels": {
    "alertname": "High memory usage"
  },
  "commonLabels": {
    "alertname": "High memory usage",
    "instance": "api-01",
    "team": "platform"
  },
  "commonAnnotations": {
    "summary": "api-01 memory at 93%"
  },
  "externalURL": "https://grafana.acme.dev/",
  "version": "1",
  "groupKey": "{}:{alertname=\"High memory usage\"}",
  "truncatedAlerts": 0,
  "state": "alerting",
  "title": "[FIRING:1] High memory usage (api-01 platform)",
  "message": "**Firing**\n\nLabels:\n - alertname = High memory usage\n - instance = api-01\n - team = platform\nAnnotations:\n - summary = api-01 memory at 93%\n"
}

Things that bite people

This example's signature actually verifies: with Grafana's HMAC option enabled (and no timestamp header configured) the value in X-Grafana-Alerting-Signature — the default header name — is a hex HMAC-SHA256 of the raw body. Sample secret here: grafana_shared_secret_Vp4mR7sample; check it in the signature debugger (generic scheme) or on a bin. If you do configure a timestamp header, the input becomes timestamp + ":" + body — a plain body HMAC will no longer match.
One notification = one alert group: status is firing if any alert in alerts[] fires; check each alert's own status too. endsAt: "0001-01-01T00:00:00Z" is the Go zero time — it means "not resolved yet", not year 1.
truncatedAlerts > 0 means the Max Alerts contact-point option dropped alerts beyond the limit (0 = no limit) — they are ignored, not batched into a second delivery.
The HTTP method is configurable (POST or PUT), and auth can be Basic or an Authorization header value — but not both. The Custom Payload template option replaces this entire structure (Title/Message fields are then ignored), so don't hard-code this shape if teammates can edit contact points.
state (alerting/ok) is the legacy group state; prefer status (firing/resolved). "Disable resolved message" stops resolved notifications entirely.

Send it yourself

Reproduce this delivery against any endpoint (your handler, a bin, staging):

$ curl -X POST https://your-endpoint.example/hook \
  -H 'content-type: application/json' \
  -H 'x-grafana-alerting-signature: e5baf0f180cf0d4dba7d7446718bb836fe24845fd54571cb8e4096ecc07646be' \
 -d '{
  "receiver": "Hookden webhook",
  "status": "firing",
  "orgId": 1,
  "alerts": [
    {
      "status": "firing",
      "labels": {
        "alertname": "High memory usage",
        "instance": "api-01",
        "team": "platform"
      },
      "annotations": {
        "description": "Memory usage above 90% for 5 minutes",
        "runbook_url": "https://runbooks.acme.dev/high-memory",
        "summary": "api-01 memory at 93%"
      },
      "startsAt": "2026-08-29T19:25:00.000Z",
      "endsAt": "0001-01-01T00:00:00Z",
      "generatorURL": "https://grafana.acme.dev/alerting/grafana/bdx29v7z/view",
      "fingerprint": "c6eadffa33fcdf37",
      "silenceURL": "https://grafana.acme.dev/alerting/silence/new?alertmanager=grafana&matchers=alertname%3DHigh+memory+usage%2Cinstance%3Dapi-01",
      "dashboardURL": "",
      "panelURL": "",
      "values": {
        "B": 93.4,
        "C": 1
      }
    }
  ],
  "groupLabels": {
    "alertname": "High memory usage"
  },
  "commonLabels": {
    "alertname": "High memory usage",
    "instance": "api-01",
    "team": "platform"
  },
  "commonAnnotations": {
    "summary": "api-01 memory at 93%"
  },
  "externalURL": "https://grafana.acme.dev/",
  "version": "1",
  "groupKey": "{}:{alertname=\"High memory usage\"}",
  "truncatedAlerts": 0,
  "state": "alerting",
  "title": "[FIRING:1] High memory usage (api-01 platform)",
  "message": "**Firing**\n\nLabels:\n - alertname = High memory usage\n - instance = api-01\n - team = platform\nAnnotations:\n - summary = api-01 memory at 93%\n"
}'

← All payload examples · Signature debugger · Docs