Webhook HTTP servers in Meraki define the destination endpoints that receive real-time alert notifications from the Meraki platform. When configured, Meraki sends HTTP POST requests containing alert data to the specified URL whenever network events occur. Each HTTP server can reference a payload template that controls the format of the data sent, enabling integration with monitoring platforms, SIEM solutions, and incident management systems. HTTP servers support shared secret authentication and can be associated with custom or built-in payload templates.
Example-1: The example below demonstrates configuring a webhook HTTP server for Splunk integration that references a custom payload template.
This configuration creates an HTTP server named “splunk_server” that sends webhook data to a Splunk HTTP Event Collector endpoint. The payload_template.name references a previously defined payload template (“splunk_template”) that formats the alert data for Splunk ingestion. The URL points to the Splunk HEC endpoint.