Webhook · Logstreem

Webhook

Signed JSON to your own endpoint.

For routing into your own incident system. Requests are signed with HMAC-SHA256 so you can verify they came from us.

{
  "event": "monitor.alert",
  "monitor": {
    "id": "mon_4a81e0c3f6a5b2d1e0c9",
    "name": "Checkout error rate > 2%",
    "type": "threshold",
    "dataset": "api-gateway-prod"
  },
  "state": "alert",
  "previous_state": "ok",
  "value": 4.1,
  "threshold": 2,
  "operator": "above",
  "window": { "start": "2026-09-06T09:35:00Z", "end": "2026-09-06T09:40:00Z" },
  "url": "https://app.logstreem.com/monitors/mon_4a81e0c3f6a5b2d1e0c9",
  "triggered_at": "2026-09-06T09:40:12.114Z"
}

Verify against the raw body

JSON.parse then re-stringify reorders keys and breaks the signature. Keep the raw buffer — in Express that means express.raw(), not express.json().

Behaviour	Value
Timeout	5 seconds
Retries	5, exponential backoff to 1 hour
Success	Any `2xx`
Signature header	`Logstreem-Signature: t=…,v1=…`

PreviousOpsgenie NextEmail