Skip to main content
Every source uses the same ingestion endpoint and the same response codes.

​
Codes

​
What is persisted in each case

Requests rejected with 400, 401, 403, 404 and 413 persist nothing. There is no alert record to inspect afterwards — if you need a trail, look at the originating tool’s log.
A 202 means the alert was recorded. It may then:
  • Create an incident;
  • Be aggregated into an open incident;
  • Resolve an open incident (sources with auto-resolution);
  • Be discarded, when the state sent is not actionable.
See Alert without incident.

​
Retry behavior per tool

4xx errors are normally not re-sent. A wrong token means lost alerts until someone fixes the configuration — it is worth monitoring delivery failures on the tool’s side.