What alert sources are supported?

Every alert source maps a monitoring, error tracking, ticketing, or security tool to the same alerting flow: connect it once, and its alerts flow into your routes, escalations, and incidents from then on. This page lists the tools incident.io integrates with directly.

Can’t find your tool? See Using HTTP or custom HTTP sources below.

Alert source	Setup
AWS CloudWatch	Set up in dashboard
AWS SNS	Set up in dashboard
Azure Monitor	Set up in dashboard
BigPanda	Setup guide
BugSnag	Set up in dashboard
Checkly	Set up in dashboard
Chronosphere	Setup guide
Cloudflare	Set up in dashboard
Coralogix	Set up in dashboard
Cronitor	Set up in dashboard
Crowdstrike Falcon	Setup guide
Datadog	Setup guide
Dynatrace	Set up in dashboard
Elastic	Set up in dashboard
Email	Setup guide
Expel	Set up in dashboard
GitHub Issues	Set up in dashboard
Google Cloud Platform	Set up in dashboard
Grafana	Setup guide
Honeycomb	Set up in dashboard
Jira/ITSM	Set up in dashboard
Monte Carlo	Setup guide
Nagios Core	Setup guide
New Relic	Set up in dashboard
Opsgenie	Set up in dashboard
PagerDuty	Set up in dashboard
Panther	Setup guide
Pingdom	Set up in dashboard
Prometheus Alertmanager	Set up in dashboard
PRTG	Set up in dashboard
Runscope	Set up in dashboard
Sentry Issues	Set up in dashboard
Sentry Metrics	Setup guide
ServiceNow	Set up in dashboard
SolarWinds AppOptics	Setup guide
Splunk	Set up in dashboard
StatusCake	Set up in dashboard
Sumo Logic	Set up in dashboard
Uptime.com	Setup guide
Vercel	Set up in dashboard
Zendesk	Set up in dashboard

Using HTTP or custom HTTP sources

Any tool that can send a webhook can become an alert source, even if it’s not in the list above. Wherever your alerts live, you can start sending them to incident.io.

Default HTTP

Use a default HTTP source when you control the payload, for internal scripts, custom monitors, or anything else that can send JSON shaped to match incident.io’s schema:

Expected body structure

{
  "title": "My first alert",
  "description": "Some additional context",
  "deduplication_key": "first-alert",
  "status": "firing",
  "metadata": {
    "team": "core",
    "service": "api"
  }
}

Use the metadata field to set alert attributes for routing and filtering.

Custom HTTP

Use a custom HTTP source when a tool’s webhook payload can’t be changed to match that schema. Write a JavaScript transform expression that reshapes whatever the tool actually sends into incident.io’s expected format:

Example payload from external tool

{
  "title": "High CPU usage on server-01",
  "status": "firing",
  "description": "CPU usage exceeded 90% threshold",
  "url": "https://monitoring.example.com/alerts/12345",
  "team": "platform",
  "severity": "critical"
}

Your transform expression

// $ represents your incoming payload
return {
  title: $.title ? $.title : 'Custom HTTP alert',
  status: $.status === 'resolved' ? 'resolved' : 'firing',
  description: $.description ? $.description : '',
  source_url: $.url,
  metadata: { team: $.team, severity: $.severity },
};

So you can connect literally anything that speaks webhooks to incident.io, on your own terms, today. See Custom HTTP alert sources for the full walkthrough, including how to power alert attributes and priorities from the transform.

Alert source	Setup
Default HTTP	Set up in dashboard
Custom HTTP	Setup guide

​Using HTTP or custom HTTP sources

​Default HTTP

​Custom HTTP

Using HTTP or custom HTTP sources

Default HTTP

Custom HTTP