Explore documentation
  1. Welcome to Uptime 👋
  2. Frequently Asked Questions
  3. On-call scheduling and alerting
    1. Get started
    2. Slack and other integrations ↗
    3. Connecting external calendars
    4. Advanced guide
  4. Incidents
    1. Get started
    2. Post mortems
    3. Metadata & Catalog
    4. Screening alerts
    5. Reporting ↗
  5. Monitoring
    1. Get started
    2. Working with monitors
    3. Customizing monitors
    4. Monitor types
  6. Status pages
    1. Get started
    2. Advanced guide
  7. Uptime API
    1. Getting an API token
    2. Monitors
    3. Heartbeats
    4. On-call & incidents
    5. Status pages
    6. Metadata
    7. Integrations
    8. Team members
    9. Reporting

Reporting

Incident logs integration

The Incident Log integration allows you to send detailed audit logs of various events related to your monitors, heartbeats, and incidents to an external logging service via webhooks. Each event is formatted as a JSON payload, providing comprehensive information about what happened, when, and to which resource.

Each payload includes common fields:

Field Type Description
dt String ISO 8601 formatted timestamp of when the event occurred.
event String The type of event (e.g., monitor.created, incident.started).
message String A human-readable message describing the event.
organization_id String The Better Stack ID of the organization the event originated from.
team_id String The Better Stack ID of the team the event originated from.

Monitor Events

Events related to your uptime monitors.

'monitor.checked'

Triggered when a monitor performs a check.

Example Payload: Monitor Checked
{
  "dt": "2026-05-13T10:00:00.000Z",
  "event": "monitor.checked",
  "message": "Monitor \"My Website\" successfully checked from Central Europe 1",
  "organization_id": "org_123",
  "team_id": "team_456",
  "monitor_id": 789,
  "monitor_url": "https://www.example.com",
  "monitor_name": "My Website",
  "monitor_type": "status",
  "region": "eu-central-1",
  "response_time": 0.150,
  "response_code": 200,
  "success": true,
  "cause": null
}
Field Type Description
monitor_id Integer The ID of the monitor.
monitor_url String The URL being monitored.
monitor_name String The name of the monitor.
monitor_type String The type of monitor (e.g., status, keyword, ping).
region String The region from which the check was performed (e.g., eu-central-1).
response_time Float The response time of the check in seconds.
response_code Integer The HTTP response code received (if applicable).
success Boolean true if the check was successful, false otherwise.
cause String The cause of failure if the check was unsuccessful.

monitor.created

Triggered when a monitor is created.

Example Payload: Monitor Created
{
  "dt": "2026-05-13T10:05:00.000Z",
  "event": "monitor.created",
  "message": "Monitor \"My Website\" created",
  "organization_id": "org_123",
  "team_id": "team_456",
  "monitor_id": 789,
  "monitor_url": "https://www.example.com",
  "monitor_name": "My Website",
  "monitor_type": "status"
}
Field Type Description
monitor_id Integer The ID of the monitor.
monitor_url String The URL being monitored.
monitor_name String The name of the monitor.
monitor_type String The type of monitor (e.g., status, keyword, ping).

monitor.destroyed

Triggered when a monitor is deleted.

Example Payload: Monitor Destroyed
{
  "dt": "2026-05-13T10:10:00.000Z",
  "event": "monitor.destroyed",
  "message": "Monitor \"My Website\" destroyed",
  "organization_id": "org_123",
  "team_id": "team_456",
  "monitor_id": 789,
  "monitor_url": "https://www.example.com",
  "monitor_name": "My Website",
  "monitor_type": "status"
}
Field Type Description
monitor_id Integer The ID of the monitor.
monitor_url String The URL being monitored.
monitor_name String The name of the monitor.
monitor_type String The type of monitor (e.g., status, keyword, ping).

monitor.down

Triggered when a monitor goes down.

Example Payload: Monitor Down
{
  "dt": "2026-05-13T10:15:00.000Z",
  "event": "monitor.down",
  "message": "Monitor \"My Website\" is down — Connection refused",
  "organization_id": "org_123",
  "team_id": "team_456",
  "monitor_id": 789,
  "monitor_url": "https://www.example.com",
  "monitor_name": "My Website",
  "monitor_type": "status",
  "cause": "Connection refused",
  "regions": ["us-east-1", "eu-central-1"]
}
Field Type Description
monitor_id Integer The ID of the monitor.
monitor_url String The URL being monitored.
monitor_name String The name of the monitor.
monitor_type String The type of monitor (e.g., status, keyword, ping).
cause String The cause of the downtime.
regions Array An array of regions reporting the downtime.

monitor.paused

Triggered when a monitor is paused.

Example Payload: Monitor Paused
{
  "dt": "2026-05-13T10:20:00.000Z",
  "event": "monitor.paused",
  "message": "Monitor \"My Website\" paused",
  "organization_id": "org_123",
  "team_id": "team_456",
  "monitor_id": 789,
  "monitor_url": "https://www.example.com",
  "monitor_name": "My Website",
  "monitor_type": "status"
}
Field Type Description
monitor_id Integer The ID of the monitor.
monitor_url String The URL being monitored.
monitor_name String The name of the monitor.
monitor_type String The type of monitor (e.g., status, keyword, ping).

monitor.unpaused

Triggered when a monitor is unpaused.

Example Payload: Monitor Unpaused
{
  "dt": "2026-05-13T10:25:00.000Z",
  "event": "monitor.unpaused",
  "message": "Monitor \"My Website\" unpaused",
  "organization_id": "org_123",
  "team_id": "team_456",
  "monitor_id": 789,
  "monitor_url": "https://www.example.com",
  "monitor_name": "My Website",
  "monitor_type": "status"
}
Field Type Description
monitor_id Integer The ID of the monitor.
monitor_url String The URL being monitored.
monitor_name String The name of the monitor.
monitor_type String The type of monitor (e.g., status, keyword, ping).

monitor.verifying_recovery

Triggered when a monitor is verifying recovery.

Example Payload: Monitor Verifying Recovery
{
  "dt": "2026-05-13T10:30:00.000Z",
  "event": "monitor.verifying_recovery",
  "message": "Monitor \"My Website\" is verifying recovery",
  "organization_id": "org_123",
  "team_id": "team_456",
  "monitor_id": 789,
  "monitor_url": "https://www.example.com",
  "monitor_name": "My Website",
  "monitor_type": "status"
}
Field Type Description
monitor_id Integer The ID of the monitor.
monitor_url String The URL being monitored.
monitor_name String The name of the monitor.
monitor_type String The type of monitor (e.g., status, keyword, ping).

Heartbeat Events

Events related to your heartbeats.

heartbeat.checked

Triggered when a heartbeat checks in.

Example Payload: Heartbeat Checked
{
  "dt": "2026-05-13T11:00:00.000Z",
  "event": "heartbeat.checked",
  "message": "Heartbeat \"Daily Backup\" checked in",
  "organization_id": "org_123",
  "team_id": "team_456",
  "heartbeat_id": 101,
  "heartbeat_name": "Daily Backup",
  "success": true,
  "fail_code": null
}
Field Type Description
heartbeat_id Integer The ID of the heartbeat.
heartbeat_name String The name of the heartbeat.
success Boolean true if the check-in was successful, false otherwise.
fail_code String The failure code if the check-in was unsuccessful.

heartbeat.created

Triggered when a heartbeat is created.

Example Payload: Heartbeat Created
{
  "dt": "2026-05-13T11:05:00.000Z",
  "event": "heartbeat.created",
  "message": "Heartbeat \"Daily Backup\" created",
  "organization_id": "org_123",
  "team_id": "team_456",
  "heartbeat_id": 101,
  "heartbeat_name": "Daily Backup"
}
Field Type Description
heartbeat_id Integer The ID of the heartbeat.
heartbeat_name String The name of the heartbeat.

heartbeat.destroyed

Triggered when a heartbeat is deleted.

Example Payload: Heartbeat Destroyed
{
  "dt": "2026-05-13T11:10:00.000Z",
  "event": "heartbeat.destroyed",
  "message": "Heartbeat \"Daily Backup\" destroyed",
  "organization_id": "org_123",
  "team_id": "team_456",
  "heartbeat_id": 101,
  "heartbeat_name": "Daily Backup"
}
Field Type Description
heartbeat_id Integer The ID of the heartbeat.
heartbeat_name String The name of the heartbeat.

heartbeat.down

Triggered when a heartbeat goes down (missed).

Example Payload: Heartbeat Down
{
  "dt": "2026-05-13T11:15:00.000Z",
  "event": "heartbeat.down",
  "message": "Heartbeat \"Daily Backup\" is down",
  "organization_id": "org_123",
  "team_id": "team_456",
  "heartbeat_id": 101,
  "heartbeat_name": "Daily Backup"
}
Field Type Description
heartbeat_id Integer The ID of the heartbeat.
heartbeat_name String The name of the heartbeat.

heartbeat.paused

Triggered when a heartbeat is paused.

Example Payload: Heartbeat Paused
{
  "dt": "2026-05-13T11:20:00.000Z",
  "event": "heartbeat.paused",
  "message": "Heartbeat \"Daily Backup\" paused",
  "organization_id": "org_123",
  "team_id": "team_456",
  "heartbeat_id": 101,
  "heartbeat_name": "Daily Backup"
}
Field Type Description
heartbeat_id Integer The ID of the heartbeat.
heartbeat_name String The name of the heartbeat.

heartbeat.unpaused

Triggered when a heartbeat is unpaused.

Example Payload: Heartbeat Unpaused
{
  "dt": "2026-05-13T11:25:00.000Z",
  "event": "heartbeat.unpaused",
  "message": "Heartbeat \"Daily Backup\" unpaused",
  "organization_id": "org_123",
  "team_id": "team_456",
  "heartbeat_id": 101,
  "heartbeat_name": "Daily Backup"
}
Field Type Description
heartbeat_id Integer The ID of the heartbeat.
heartbeat_name String The name of the heartbeat.

heartbeat.up

Triggered when a heartbeat comes back up.

Example Payload: Heartbeat Up
{
  "dt": "2026-05-13T11:30:00.000Z",
  "event": "heartbeat.up",
  "message": "Heartbeat \"Daily Backup\" is up",
  "organization_id": "org_123",
  "team_id": "team_456",
  "heartbeat_id": 101,
  "heartbeat_name": "Daily Backup"
}
Field Type Description
heartbeat_id Integer The ID of the heartbeat.
heartbeat_name String The name of the heartbeat.

Incident Events

Events related to incidents.

incident.acknowledged

Triggered when an incident is acknowledged.

Example Payload: Incident Acknowledged
{
  "dt": "2026-05-13T12:00:00.000Z",
  "event": "incident.acknowledged",
  "message": "Incident \"My Website is Down\" acknowledged by user@example.com",
  "organization_id": "org_123",
  "team_id": "team_456",
  "incident_id": 201,
  "incident_name": "My Website is Down",
  "resource_type": "monitor",
  "resource_id": 789,
  "resource_name": "My Website",
  "user_email": "user@example.com",
  "user_name": "John Doe",
  "integration_name": null,
  "integration_type": null
}
Field Type Description
incident_id Integer The ID of the incident.
incident_name String The name of the incident.
resource_type String The type of resource causing the incident (e.g., monitor, heartbeat).
resource_id Integer The ID of the resource causing the incident.
resource_name String The name of the resource causing the incident.
user_email String The email of the user who acknowledged the incident (if applicable).
user_name String The name of the user who acknowledged the incident (if applicable).
integration_name String The name of the integration that acknowledged the incident (if applicable).
integration_type String The type of integration that acknowledged the incident (if applicable).

incident.destroyed

Triggered when an incident is deleted.

Example Payload: Incident Destroyed
{
  "dt": "2026-05-13T12:05:00.000Z",
  "event": "incident.destroyed",
  "message": "Incident \"My Website is Down\" destroyed",
  "organization_id": "org_123",
  "team_id": "team_456",
  "incident_id": 201,
  "incident_name": "My Website is Down",
  "resource_type": "monitor",
  "resource_id": 789,
  "resource_name": "My Website"
}
Field Type Description
incident_id Integer The ID of the incident.
incident_name String The name of the incident.
resource_type String The type of resource causing the incident.
resource_id Integer The ID of the resource causing the incident.
resource_name String The name of the resource causing the incident.

incident.escalated

Triggered when an incident is escalated.

Example Payload: Incident Escalated
{
  "dt": "2026-05-13T12:10:00.000Z",
  "event": "incident.escalated",
  "message": "Incident \"My Website is Down\" escalated to John Doe, Operations Team",
  "organization_id": "org_123",
  "team_id": "team_456",
  "incident_id": 201,
  "incident_name": "My Website is Down",
  "resource_type": "monitor",
  "resource_id": 789,
  "resource_name": "My Website",
  "escalation_targets": [
    {
      "type": "user",
      "id": 123,
      "name": "John Doe"
    },
    {
      "type": "team",
      "id": 456,
      "name": "Operations Team"
    }
  ]
}
Field Type Description
incident_id Integer The ID of the incident.
incident_name String The name of the incident.
resource_type String The type of resource causing the incident.
resource_id Integer The ID of the resource causing the incident.
resource_name String The name of the resource causing the incident.
escalation_targets Array An array of objects, each describing an escalation target. Each object has type (e.g., user, team), id, and name.

incident.grouped

Triggered when an incident is grouped.

Example Payload: Incident Grouped
{
  "dt": "2026-05-13T12:15:00.000Z",
  "event": "incident.grouped",
  "message": "Incident \"My Website is Down\" grouped into incident group 999",
  "organization_id": "org_123",
  "team_id": "team_456",
  "incident_id": 201,
  "incident_name": "My Website is Down",
  "resource_type": "monitor",
  "resource_id": 789,
  "resource_name": "My Website",
  "incident_group_id": 999
}
Field Type Description
incident_id Integer The ID of the incident.
incident_name String The name of the incident.
resource_type String The type of resource causing the incident.
resource_id Integer The ID of the resource causing the incident.
resource_name String The name of the resource causing the incident.
incident_group_id Integer The ID of the incident group the incident was added to.

incident.reopened

Triggered when an incident is reopened.

Example Payload: Incident Reopened
{
  "dt": "2026-05-13T12:20:00.000Z",
  "event": "incident.reopened",
  "message": "Incident \"My Website is Down\" reopened by user@example.com",
  "organization_id": "org_123",
  "team_id": "team_456",
  "incident_id": 201,
  "incident_name": "My Website is Down",
  "resource_type": "monitor",
  "resource_id": 789,
  "resource_name": "My Website",
  "user_email": "user@example.com",
  "user_name": "John Doe",
  "integration_name": null,
  "integration_type": null
}
Field Type Description
incident_id Integer The ID of the incident.
incident_name String The name of the incident.
resource_type String The type of resource causing the incident.
resource_id Integer The ID of the resource causing the incident.
resource_name String The name of the resource causing the incident.
user_email String The email of the user who reopened the incident (if applicable).
user_name String The name of the user who reopened the incident (if applicable).
integration_name String The name of the integration that reopened the incident (if applicable).
integration_type String The type of integration that reopened the incident (if applicable).

incident.resolved

Triggered when an incident is resolved.

Example Payload: Incident Resolved
{
  "dt": "2026-05-13T12:25:00.000Z",
  "event": "incident.resolved",
  "message": "Incident \"My Website is Down\" resolved by user@example.com",
  "organization_id": "org_123",
  "team_id": "team_456",
  "incident_id": 201,
  "incident_name": "My Website is Down",
  "resource_type": "monitor",
  "resource_id": 789,
  "resource_name": "My Website",
  "user_email": "user@example.com",
  "user_name": "John Doe",
  "integration_name": null,
  "integration_type": null
}
Field Type Description
incident_id Integer The ID of the incident.
incident_name String The name of the incident.
resource_type String The type of resource causing the incident.
resource_id Integer The ID of the resource causing the incident.
resource_name String The name of the resource causing the incident.
user_email String The email of the user who resolved the incident (if applicable).
user_name String The name of the user who resolved the incident (if applicable).
integration_name String The name of the integration that resolved the incident (if applicable).
integration_type String The type of integration that resolved the incident (if applicable).

incident.started

Triggered when an incident starts.

Example Payload: Incident Started
{
  "dt": "2026-05-13T12:30:00.000Z",
  "event": "incident.started",
  "message": "Incident \"My Website is Down\" started — Connection refused",
  "organization_id": "org_123",
  "team_id": "team_456",
  "incident_id": 201,
  "incident_name": "My Website is Down",
  "resource_type": "monitor",
  "resource_id": 789,
  "resource_name": "My Website",
  "incident_cause": "Connection refused",
  "regions": ["us-east-1", "eu-central-1"],
  "escalation_policy_id": 111
}
Field Type Description
incident_id Integer The ID of the incident.
incident_name String The name of the incident.
resource_type String The type of resource causing the incident.
resource_id Integer The ID of the resource causing the incident.
resource_name String The name of the resource causing the incident.
incident_cause String The cause of the incident.
regions Array An array of regions reporting the incident.
escalation_policy_id Integer The ID of the escalation policy triggered by the incident.

Previous article

Remove a team member from team by e-mail