NetBird now supports streaming network activity events directly to any HTTP/S endpoint through its new Generic HTTP endpoint integration . This feature extends the list of available integrations (like Datadog, AWS S3, and others) and enables real-time visibility into network activity by sending each event as a JSON-formatted POST request to a specified URL of your SIEM, custom application, or third-party service.

Key Features

• Real-time Monitoring: Events are sent instantly, allowing rapid analysis and response.
• Flexible Integration: Works with any HTTP/S-compatible system, including SIEMs, custom applications, or third-party services.
• Custom Payloads: Tailor the data format using payload templates to fit your system’s requirements.
• Secure Delivery: Supports Token and Basic authentication for protected endpoints.

How To Enable

To enable it, go to the NetBird dashboard, navigate to the Integrations tab → Event Streaming → select Generic HTTP, and click Connect. Define the destination URL, optional headers, authentication, and an optional custom body template. A test event is sent automatically to verify the setup.

See the documentation for detailed instructions on how to set up and use this integration.

Once enabled, the integration sends each network activity event as a POST request to the specified HTTP/S endpoint. Events are formatted in JSON and can be customized using a built-in templating engine.