Working with Webhooks
A webhook is an HTTP request, triggered by an event in the source system (TISC) and sent to a destination system (where the endpoint URL is present), with a payload of event data.
These webhooks in Threat Intelligence Security Center are useful to notify the destination application whenever the events occurs.
In TISC, you can do the following:
-
Configure Webhooks
-
Manage Triggers
-
Retry mechanism
-
Perform validation
-
Manage subscriptions
-
System properties for Webhooks
The system properties for webhooks are explained below. -
Configure webhooks
Configure a webhook to subscribe to events in Threat Intelligence Security Center. -
Webhook Triggers
Webhook triggers are used to filter the threat intelligence entities that needs to be tracked for any event changes such as Create, Update, and Delete.
--- title: Working with Webhooks description: A webhook is an HTTP request, triggered by an event in the source system \(TISC\) and sent to a destination system \(where the endpoint URL is present\), with a payload of event data. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/threat-intelligence-security-center/tisc-webhooks.html release: australia product: Threat Intelligence Security Center classification: threat-intelligence-security-center topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 keywords: [webhooks, webhook triggers, webhook retry mechanism, webhook subscriptions] breadcrumb: [Administer, Threat Intelligence Security Center, Security Operations] --- # Working with Webhooks A webhook is an HTTP request, triggered by an event in the source system \(TISC\) and sent to a destination system \(where the endpoint URL is present\), with a payload of event data. These webhooks in Threat Intelligence Security Center are useful to notify the destination application whenever the events occurs. In TISC, you can do the following: - Configure Webhooks - Manage Triggers - Retry mechanism - Perform validation - Manage subscriptions - **[System properties for Webhooks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-sysprops-retry.md)** The system properties for webhooks are explained below. - **[Configure webhooks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/setup-webhooks.md)** Configure a webhook to subscribe to events in Threat Intelligence Security Center. - **[Webhook Triggers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-triggers.md)** Webhook triggers are used to filter the threat intelligence entities that needs to be tracked for any event changes such as Create, Update, and Delete.
| title | Working with Webhooks |
| description | A webhook is an HTTP request, triggered by an event in the source system \(TISC\) and sent to a destination system \(where the endpoint URL is present\), with a payload of event data. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/security-management/threat-intelligence-security-center/tisc-webhooks.html |
| release | australia |
| product | Threat Intelligence Security Center |
| classification | threat-intelligence-security-center |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| keywords | webhookswebhook triggerswebhook retry mechanismwebhook subscriptions |
| breadcrumb | AdministerThreat Intelligence Security CenterSecurity Operations |