Configure the webhook in DataSet

Configure webhook endpoints so that DataSet can use the endpoint to communicate with Incident Response.

Before you begin

Role required: Responder, Manager, or Administrator

About this task

Note: While this integration with a third-party product is supported, the documentation here is based upon information provided by that third-party. More current information about the operation of that third-party’s system may be available from them directly.


  1. Log in to your DataSet account.
  2. Navigate to the Alerts tab.
  3. Click Settings and select Alerts JSON.
    Settings for JSON alerts.
  4. In the Alert JSON section, paste the payload copied from Incident Response.
  5. Replace both the instances of <webhook URL> in the payload with the webhook URL copied from Incident Response.
    Replace webhook URL in the payload.
  6. Click Save File.

    If you want to change the webhook URL, you don’t need to follow the whole steps just follow the steps 5 and 6.

What to do next

Create alerts that you want Incident Response to handle.

  1. From the menu bar, click Search and then click New Search.
  2. Pass the filter query on Search.
  3. Click Save and select Save as Alert.

    Save query as alert.

  4. Enter the alert name and add the alert conditions per your requirement.

    Add alert conditions.

  5. Click Save.