Incident Ingest

Send Alerts from Any Monitoring Tool to Alert24

Connect Nagios, Datadog, Prometheus, Grafana, Zabbix, CloudWatch, Azure Monitor, New Relic, Dynatrace, or OpsGenie to Alert24 so every alert automatically becomes a tracked incident.

When your monitoring tool fires an alert, Alert24 can automatically open a tracked incident — with severity mapping, deduplication, and routing to your on-call schedule. No more manually creating incidents after your pager goes off.

How it works

Each monitoring tool has a mechanism to send an HTTP webhook when an alert fires. Alert24's incidents API accepts that webhook (either directly or via a small adapter) and creates a tracked incident in your account. When the alert resolves, the incident can auto-close.

Every incident created this way:

  • Routes through your escalation policies
  • Deduplicates on a stable alias so repeated alerts don't create duplicates
  • Appears in your incident timeline alongside manually created incidents
  • Can auto-link to affected services

Supported tools

Tool Integration method Guide
Nagios Event handler script Nagios → Alert24
Datadog Webhook notification channel Datadog → Alert24
Prometheus AlertManager Webhook receiver + adapter Prometheus → Alert24
Grafana Alerting Webhook contact point Grafana → Alert24
Zabbix Webhook media type Zabbix → Alert24
AWS CloudWatch SNS → Lambda → API CloudWatch → Alert24
Azure Monitor Action group → webhook Azure Monitor → Alert24
New Relic Webhook destination New Relic → Alert24
Dynatrace Custom integration Dynatrace → Alert24
OpsGenie Outbound webhook OpsGenie → Alert24

The incidents API

All integrations ultimately POST to the same endpoint:

POST https://app.alert24.net/api/v1/incidents
Authorization: Bearer ak_live_YOUR_KEY
Content-Type: application/json

{
  "title": "Your alert title",
  "severity": "critical",
  "alias": "unique-dedup-key",
  "source": "your-tool-name"
}

See the Incidents API reference for the full field list.

Deduplication

Set the alias field to a stable identifier for the alert (e.g., nagios-hostname-servicename, datadog-alert-12345). If the same alert fires multiple times, Alert24 increments the occurrence count on the existing open incident rather than creating duplicates. This is the most important field to get right.

Any tool not listed?

If your monitoring tool can POST a JSON webhook, it can send incidents to Alert24. Point it at POST /api/v1/incidents with an Authorization: Bearer header and a JSON body containing at least "title". The curl / API guide shows the raw request format.