Browse documentation

Where alerts go

An alert nobody sees is not an alert. There are three routes out, and you can use any combination of them.

In the dashboard

Every alert always lands in the alerts board, whatever else you switch on. It cannot be turned off, so there is always one complete record of what was raised.

Email digest

A digest can go to your company administrators. It is a digest rather than one message per alert, so a bad day produces a summary rather than an inbox full of near-identical mail.

Webhook

For anything else, alerts can be posted to an HTTPS endpoint you control, which is how you get them into an incident tool, a chat channel or your own systems.

  • Each webhook has a signing secret. Every request is signed with it, so your endpoint can prove a payload genuinely came from Lineman and not from someone who found the URL. Verify the signature before you act on a payload.
  • The secret is shown once, when it is created. Store it somewhere you can retrieve it. If you lose it, rotate it and update your endpoint: there is no way to read it back, which is what makes it worth having.
  • Endpoints must be HTTPS. Alert payloads describe your spending, and that is not something to send in the clear.