← KB

🔌 Generic Webhook Integration

Connect any security tool that supports webhooks to Agentic SOC using our generic webhook endpoint.

📡 Endpoint

POST https://api.ayzalai.com/api/integrations/webhook

📋 Headers

Header Value
x-api-key Your Ayzal AI Agentic SOC Platform API key
x-siem-type Tool identifier (e.g., sentinel, qradar, arcsight)
Content-Type application/json

📦 Payload Format

{
  "events": [
    {
      "title": "Suspicious Login Detected",
      "severity": "HIGH",
      "sourceIp": "192.168.1.100",
      "hostname": "prod-server-01",
      "description": "Multiple failed login attempts detected",
      "timestamp": "2026-07-20T10:00:00Z"
    }
  ]
}

Severity Levels

Use standard severity: CRITICAL, HIGH, MEDIUM, LOW, INFO

Supported Tools

  • Microsoft Sentinel
  • IBM QRadar
  • ArcSight
  • Elastic Security
  • Any tool with webhook capability

⚠️ Make sure your API key has active status in Ayzal AI Agentic SOC Platform Settings.