Source type

Grafana Source Configuration

Grafana sources receive Alerting webhook notifications and can verify Grafana's configured HMAC signature headers.

GRAFANAPOST, PUT, PATCH, DELETEWebhook Signing SecretObservability
Grafana webhook notifier documentationAll source types
Grafana sends webhook traffic to a FastHook source, FastHook validates the provider contract, records the request, and routes accepted events through connections to destinations.GrafanaProviderPOST, PUT, PATCH, DELETESignedFastHookSource URLGRAFANAProvider credentialsignatureVerify before queue401 on auth failure405 on wrong methodAcceptedRequestverified: trueConnections route the accepted request to destinationsFilters, transformations, retries, replay, and destination signatures stay downstream from source verification.

Grafana configuration

Create a Grafana source, keep POST and PUT and PATCH and DELETE enabled, and provide the configured Webhook Signing Secret, Optional signature_header and timestamp_header through API values for provider signature. FastHook uses these settings to validate each Grafana delivery before it enters the routing workflow.

Source Type

GRAFANA

Allowed methods

POST, PUT, PATCH, DELETE

Authentication

Provider signature

Credential fields

Webhook Signing Secret, Optional signature_header and timestamp_header through API

Grafana source config
{
  "type": "GRAFANA",
  "config": {
    "auth_type": "PROVIDER_SIGNATURE",
    "auth": {
      "provider": "GRAFANA",
      "webhook_signing_secret": "provider-secret"
    },
    "allowed_http_methods": ["POST","PUT","PATCH","DELETE"]
  }
}

Grafana request contract

FastHook verifies HMAC-SHA256 hex over raw body, or timestamp + ':' + raw body when a timestamp header is configured.

POSTPUTPATCHDELETE

Grafana headers

Preserve x-grafana-alerting-signature, Configured timestamp header when sending Grafana test deliveries. FastHook evaluates this request context before accepting the payload, so missing or modified values remain visible as rejected requests instead of routed events.

x-grafana-alerting-signature

Default HMAC-SHA256 hex signature header.

Configured timestamp header

Optional timestamp header included in the signed payload.

Grafana setup

  1. Create a Grafana webhook contact point using the FastHook Source URL.
  2. Use the same secret in Grafana and FastHook.
  3. If Grafana is configured with custom signature or timestamp headers, set those names through the FastHook API.

Continue with Grafana