Working with Events

Events are the incoming payloads generated in FireHydrant from your automated monitoring and alerting tools. Anything that can send data to a webhook can create an Event in FireHydrant.

Incoming Events create a data stream that teams can pull from to create meaningful Alerts for their responders. They can use Alert Rules to write queries for turning the right events into Alerts.

Transposers

Every organization in FireHydrant gets its own unique set of webhook URLs for sending data to FireHydrant. These webhooks can either be generic or provider-specific.

When a webhook URL has a provider name in it, (for instance, honeycomb), FireHydrant will use a matching Transposer to modify the incoming webhook’s data into a format that a Signals Event would expect. If you don't see your monitoring tool listed and think you might need a transposer, let us know!

// Data format from Honeycomb
{
    "version": "v0.1.0",
    "name": "Sample Honeycomb Alert",
    "id": "",
    "trigger_description": "",
    "status": "triggered",
    "alert_type": "on_change",
    "summary": "",
    "description": "Validate Honeycomb Webhook Integration",
    "operator": "",
    "threshold": 0,
    "result_url": "https://honeycomb.io/sample/trigger",
    "result_groups": null,
    "result_groups_triggered": null,
    "trigger_url": "",
    "is_test": true
  }
// Data format as an Event
{
    "summary": "Sample Honeycomb Alert",
    "body": "Validate Honeycomb Webhook Integration",
    "links": [
      {
        "href": "https://honeycomb.io/sample/trigger",
        "text": "Honeycomb Trigger"
      }
    ]
  }

Signals Event Data Model

Here’s an example body of the Event data model to help you as you’re writing CEL queries and working with Transposers:

{
  "summary": "CPU Utilization Spiking",
  "body": "The production server is experiencing greater than 99% utilizations of compute.",
  "level": "ERROR",
	"images": [
    {
      "src": "https://site.com/images/123.png",
      "alt": "A simple, sample image"
    }
  ],
  "links": [
    {
      "href": "https://site.com/monitors/123",
      "text": "Monitoring Source"
    }
  ],
  "annotations": {
    "policy": "escalatable"
  },
  "received_at": "2023-11-09T18:22:16.000+00:00"
}