---
title: "Troubleshooting webhook alerts"
description: "Fix webhook alerts that do not reach your endpoint, including 401 answers, unparsed bodies, delays, and tests that pass while live alerts fail."
content_type: "troubleshooting"
product: "alerts"
platform: "TIR"
url: "/tir/alerts/troubleshooting/webhooks/"
relationships: {"troubleshooting-for":["/tir/alerts/how-to/create-a-monitoring-integration/"]}
---

# Troubleshooting webhook alerts

TIR sends each webhook request once, waits up to 10 seconds, and ignores the answer. The portal does not
list a request that failed, so check your own endpoint's logs.

| What you see                                       | Likely cause                                                                     | What to do                                                                                                                                                    |
| -------------------------------------------------- | -------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| No request arrives                                 | The URL is wrong or the endpoint cannot be reached                               | Check that the URL is reachable and accepts POST requests. It must start with `http` or `https`.                                                              |
| Your endpoint answers `401 Unauthorized`           | The `Authorization` header is missing or does not match                          | Add the header to the integration, with the value your endpoint expects. **Test URL** leaves out added headers, so it can show 401 while live alerts succeed. |
| The request arrives but the body is not read       | Your endpoint does not read a JSON body                                          | Read the body as `application/json`. See [Webhook requests](/tir/alerts/concepts/webhook-requests/).                                                          |
| Requests arrive late or are missed                 | Your endpoint takes too long to answer                                           | Answer with `200 OK` at once and process the alert afterward. TIR waits up to 10 seconds.                                                                     |
| The test works but live alerts do not arrive       | A firewall or allowlist may block live requests                                  | Check your firewall and allowlist rules for requests from TIR.                                                                                                |
| The test works and live alerts still do not arrive | The alert is not attached, the resource is stopped, or the condition was not met | See [Troubleshooting Alert Management](/tir/alerts/troubleshooting/alerts/#an-alert-i-created-sends-no-notification).                                         |

The test sends a sample alert to the URL, and it reports success when your endpoint answers with a
2xx status. See [Create a monitoring
integration](/tir/alerts/how-to/create-a-monitoring-integration/#create-a-webhook-integration).