Learn how to integrate Prisma™ Cloud with webhooks to
see alerts in your service or application.
Integrate Prisma™ Cloud with webhooks to send
Prisma Cloud alerts to webhooks and pass information to any third-party
integrations that are not natively supported on Prisma Cloud. Your
incident response teams can monitor the webhook channels to investigate
and remediate security incidents. With a webhook integration, you
can configure Prisma Cloud to send information to the webhook as
an HTTP POST request as soon as an alert is generated. You can also
modify the key format and value associated in the alert payload.
If you have internal services or applications that subscribe to
the webhook, these subscribing clients receive the alert data in
a JSON format.
If you have additional details that you want to include
in the payload to enable additional security or to verify the authenticity
of the request, you can include these as key-value pairs in a custom
Set up webhooks as an integration channel on Prisma Cloud.
Log in to Prisma Cloud and select
You can also provide a
the integration for your records.
Learn about your customization options.
You can include an authentication token in
the custom header. The integration includes Content-Type as a default header
and you cannot edit it.
Use the JSON editor to modify the JSON data in the alert
You can review the existing payload and modify the
key and value pairs to suit the implementation needs for the subscribing
webhook client. The JSON editor includes the reference vocabulary
for a brief description of each key.
to review the custom payload
The alert payload information including the key and
the value is displayed onscreen. You can revise the payload to meet
your integration needs.
to review the integration
After you set up the integration successfully, the status (
turns red when the Webhook URL is unreachable or when Prisma Cloud
cannot authenticate to it successfully and turns green when there
are no issues or the issues are resolved.