Grafana Alerting + Alert24 Integration: Create Incidents from Alert Rules

Grafana Alerting (available in Grafana OSS, Grafana Cloud, and Grafana Enterprise) supports webhook contact points that POST alert payloads to any URL. Alert24's incidents API accepts Grafana's webhook format with a small payload template.

Before you start

You'll need:

• An Alert24 API key with write or incidents scope (Settings → API Keys)
• Grafana 9+ (unified alerting)

Create a webhook contact point

1. In Grafana, go to Alerting → Contact points
2. Click + Add contact point
3. Set Name to Alert24
4. Set Integration to Webhook
5. Set URL to https://app.alert24.net/api/v1/incidents
6. Expand Optional webhook settings
7. Set HTTP Method to POST
8. Add a Header: Authorization → Bearer ak_live_YOUR_KEY
9. Set the Message (body template) to:

   {
     "title": "{{ .CommonAnnotations.summary | default .GroupLabels.alertname }}",
     "description": "{{ .CommonAnnotations.description }}",
     "severity": "{{ if eq .CommonLabels.severity \"critical\" }}critical{{ else if eq .CommonLabels.severity \"warning\" }}high{{ else }}medium{{ end }}",
     "alias": "grafana-{{ .GroupLabels.alertname }}-{{ .GroupLabels.instance | default \"global\" }}",
     "source": "grafana",
     "tags": ["grafana"]
   }
   

10. Click Test to verify the connection, then Save contact point

Attach to a notification policy

1. Go to Alerting → Notification policies
2. Click + New nested policy (or edit the default policy)
3. Set Contact point to Alert24
4. Add label matchers to control which alerts route here (e.g., environment = production)
5. Click Save policy

Deduplication

The alias field uses alertname + instance from the Grafana alert's labels. If the same rule fires repeatedly, Alert24 increments the occurrence count on the existing incident.

Tips

• Grafana Cloud Alerting: The setup is identical for Grafana Cloud — configure the contact point under Alerting → Contact points in your Grafana Cloud stack.
• OnCall integration: If you use Grafana OnCall, you can route to both Alert24 (for incident tracking) and OnCall (for on-call paging) from the same notification policy.
• Template variables: Grafana uses Go templates for the message body. The {{ .CommonAnnotations.summary }} variable maps to the summary annotation on your alert rule — make sure your alert rules define a summary annotation for clean incident titles.
• Test button: Grafana's Test button sends a synthetic alert payload. The Alert24 incident it creates will have placeholder values — you can delete it from Incidents in Alert24 after testing.