Runframe
GuidesIntegrations

Prometheus

Create Runframe incidents from Prometheus alert rules via Alertmanager webhooks.

Prometheus

Create incidents from Prometheus alert rules via Alertmanager.


How it works

Prometheus Alert Rule → Alertmanager → Webhook POST → Runframe → Incident Created

Prometheus evaluates alert rules and sends firing alerts to Alertmanager. Alertmanager forwards them to Runframe's webhook endpoint, which creates or resolves incidents automatically.


Setup from Runframe

  1. Navigate to Integrations Hub
  2. Click Set up webhook next to Prometheus
  3. Copy the unique webhook URL (format: https://api.runframe.io/webhooks/{routingKey})
  4. Link services to route Prometheus alerts to specific Runframe services

Alertmanager configuration

Add Runframe as a webhook receiver in your Alertmanager config:

receivers:
  - name: 'runframe'
    webhook_configs:
      - url: 'https://api.runframe.io/webhooks/YOUR_ROUTING_KEY'
        send_resolved: true

Associate the receiver with your alert routes:

route:
  group_by: ['alertname', 'cluster', 'service']
  group_wait: 10s
  group_interval: 10s
  repeat_interval: 12h
  receiver: 'runframe'

Keep your routing key secure

The routing key in your webhook URL is a secret token. Treat it like a password and use secrets management to avoid hardcoding it in config files.


Field mapping

Prometheus fieldRunframe field
Alert nameIncident title
Alert annotationsDescription
service_id labelRoutes to specific service
Alert severity labelSeverity (see mapping below)
Firing timeDetection time

Severity mapping

Prometheus severityDefault Runframe severity
CriticalCritical (SEV0)
WarningMedium (SEV2)
InfoMinimal (SEV4)

Auto-resolve

When send_resolved: true is set in Alertmanager, Runframe automatically resolves the incident when the alert clears. This keeps your incident list clean without manual intervention.


Testing

  1. Create a test alert rule in Prometheus that fires immediately
  2. Verify Alertmanager forwards it to Runframe
  3. Confirm the incident is created with correct severity and service routing
  4. Resolve the alert and verify the incident auto-resolves