Introduction
This integration connects Level alerts to ilert's incident management system via webhooks. When a Level alert becomes active, ilert creates a new incident and routes it through your escalation policy. When the alert resolves in Level, ilert closes the incident automatically. No polling. No manual updates.
⚙️ PREREQUISITES
Level administrator access (to create webhooks)
ilert account with permission to create Alert Sources
An escalation policy already configured in ilert
ilert Integration
Create a Level Alert Source in ilert
ilert needs an Alert Source configured for Level before it can receive events.
Log in to ilert and navigate to Alert Sources.
Click Create Alert Source.
Search for and select Level.io.
Enter a name for the alert source.
Assign the escalation policy that should handle Level incidents.
Configure alert grouping preferences if needed.
Click Create.
After creation, ilert generates a webhook URL for this alert source. Copy that URL — you'll need it in the next step.
💡 TIP: Name the alert source something that reflects its source, like "Level Alerts," so it's easy to identify in your ilert incident list.
Create a Webhook in Level
In Level, navigate to Settings → Webhooks.
Click Create Webhook.
Paste the ilert webhook URL into the endpoint field.
Under Events, select both:
Alert active
Alert resolved
Click Save.
ℹ️ NOTE: Both events are required. Alert active creates the ilert incident. Alert resolved closes it. If you only select one, you'll get one-way sync.
How It Works
Once the integration is live:
When a Level alert becomes active, ilert creates a new incident.
Escalation and on-call routing are handled by ilert based on the policy you assigned to the alert source.
When the alert resolves in Level, ilert automatically resolves the associated incident.
No configuration is needed in Level beyond the webhook.
Test the Integration
Trigger a test alert in Level (for example, generate a synthetic threshold breach on a monitor).
Confirm a new incident appears in ilert.
Resolve the alert in Level.
Confirm the incident automatically closes in ilert.
If the incident doesn't appear:
Verify the webhook URL was copied from ilert exactly, with no trailing spaces or truncation.
Confirm both Alert active and Alert resolved events are selected in the Level webhook.
Check that the alert source in ilert is enabled.
Review webhook delivery logs at Settings → Webhooks → [your webhook] → View Logs in Level.
If the incident doesn't auto-resolve:
Confirm Alert resolved is selected in the Level webhook.
Verify the alert in Level is fully cleared (not just acknowledged).
FAQ
Who can configure this integration? A Level administrator (to create the webhook) and an ilert user with permission to create alert sources.
Does ilert automatically resolve incidents when the Level alert clears? Yes, as long as the Alert resolved event is selected in the Level webhook. When Level sends the resolved event, ilert closes the matching incident.
Where do I configure escalation and on-call routing? In ilert. All routing, escalation policies, and notification rules are managed within ilert — nothing in Level controls that behavior.
Can I route different alert types to different ilert escalation policies? You'd need to create separate alert sources in ilert and separate webhooks in Level, scoped to different event types or device groups. ilert's alert source configuration determines the policy applied to each incoming incident.