Can Hexnode UEM send device non-compliance alerts to Slack or SIEM by webhook?Solved

Hi @eleanor_a,

In Hexnode UEM, Alert Profiles currently support email notifications for device non-compliance events. Native webhook actions are not currently available inside UEM Alert Profiles.

If your goal is to notify a Slack channel when a device becomes non-compliant, the simplest workaround is to route the Hexnode email alert to Slack:

1. In Slack, use Slack’s Send emails to this channel option to generate an email address for the required channel.
2. In Hexnode UEM, go to Admin > Alert Profile.
3. Create or edit an alert profile for the Device out of compliance event.
4. Add the Slack channel email address as a recipient under the alert profile’s target/technician notification settings.
5. Save the profile.

Also make sure the compliance conditions are configured in Hexnode. These can be set under Policies > Compliance Policies. Without compliance criteria, the non-compliance alert will not be triggered.

For SIEM or custom workflows, the usual alternatives are:

– Use the Hexnode REST API to query device compliance status programmatically.
– Forward Hexnode email alerts to an email-to-webhook parsing service that converts the email into a webhook payload.

Direct webhook-based alerting for this event is not currently available from Hexnode UEM Alert Profiles. However, webhook support for Alert Profiles is being introduced in Hexnode and will be available soon, providing a more direct way to integrate alert events with external systems and custom workflows. Stay tuned to our release notes for updates on the availability of this feature.

Regards,
Sienna Carter
Hexnode UEM