Post alerts with a Teams webhook

Post ilert alerts to a Microsoft Teams channel through a Workflows webhook, where the ilert app cannot be installed.

Office 365 connectors no longer work. Microsoft switched them off between 18 and 22 May 2026. An alert action built on an Office 365 connector URL stops delivering, and the connector cannot be recreated — its type has been retired in ilert too.

Create a Workflows webhook as described below, and a new alert action for it. There is no migration: the old alert action cannot be pointed at the new URL.

A Workflows webhook is the fallback route into a Teams channel, and it is a thin one: it only posts messages. Nobody can accept, reroute, or resolve from the channel, the message is never updated as the alert changes, and the @ilert commands do not exist.

Prefer the ilert app for Microsoft Teams. Use this route only where your organization will not grant the ilert app its permissions.

In Microsoft Teams: create the webhook

1

Open Workflows

In Microsoft Teams, open the Workflows app.

2

Start from the webhook template

Search for the template Post to a channel when a webhook request is received, and select it. Microsoft's guide Send messages in Teams using incoming webhooks lists the current templates.

Pick the template that accepts a request from anyone. The variants that only accept requests "from specific people" or "from people in an org" expect the caller to sign in with a Microsoft account, which ilert does not do.

3

Choose the team and channel

Select the team and the channel the alerts should appear in, then save the workflow.

4

Copy the URL

Microsoft shows the webhook URL once the workflow is created. Copy it.

Treat that URL as a secret. Anyone who has it can post to your channel.

In ilert: create the alert action

1

Start a new alert action

In the sidebar, go to Alerting → Alert actions and click Create new alert action.

2

Choose Teams, with the webhook option

Select the Teams tile and tick Use webhook. Click Next.

3

Choose the alert sources and the events to publish

Pick the alert sources whose alerts should reach the channel, and tick the events to publish. Only Alert created is ticked to begin with, and every event you add becomes its own message in the channel. Click Next.

4

Skip the conditions

Set conditions under Conditional execution, or click Next to publish every alert of those sources.

5

Paste the webhook URL

Name the alert action, paste the URL into URL, and click Save. Click Save again on the edit page to reach the detail page.

6

Test it

Click Test in the top right. A test message appears in the channel.

What arrives in the channel

A Workflows URL receives the same card as the ilert app posts — status, summary, details, escalation policy, priority, labels, responders, links, affected services, and images — without the buttons, and always in English. Messages are posted by the Workflows bot, not by ilert, because Microsoft does not let a workflow change the sender's name or icon.

Every event you tick posts a new message. Nothing is updated in place, so a busy alert produces a series of messages.

Send your own payload instead

On the Action step, tick Need custom fields? Show advanced options to reveal Custom content template. Anything you put there is rendered with Mustache and merged over the message ilert would otherwise send, so you can replace single fields or the whole card.

FAQ

Can I use several webhooks?

Yes. Create one alert action per webhook URL, each with its own channel and its own trigger events.

The messages stopped arriving

Open the alert action and read Alert action logs on its detail page. A workflow that was turned off or deleted, or a channel that no longer exists, shows up there. Recreate the workflow and paste the new URL into the alert action.

Can responders act on these messages?

No. Install the ilert app for that.