Setup and configuration - Mattermost

2 min read Updated: 11.09.2026

On this page What this integration sends
  1. What this integration sends
  2. Preparing things in Mattermost
  3. Configuring it in the DockRay panel
  4. The test message

What this integration sends

The Mattermost integration is a feature of the DockRay panel - the notification channel posts to a chosen Mattermost channel whenever the scheduler or the ingest pipeline detects one of five monitoring events:

  • ping - the application server stops responding,
  • ssl - the certificate is about to expire,
  • google-page-speed - a performance drop,
  • issue - a new error, never seen before,
  • error-spike - a sudden surge in the number of errors.

Each event type has its own switch and can go to a different channel.

Preparing things in Mattermost

  1. Ask your Mattermost server admin to enable Incoming Webhooks, if they are not already.
  2. Create a new incoming webhook for the channel alerts should reach.
  3. Copy the generated address - a full HTTPS URL ending in a random identifier.

The webhook address must be public HTTPS - without that, DockRay rejects it right on save. This is not a Mattermost-specific limit; it is a condition DockRay applies to every address entered in the panel - see the validation section in the next article.

Configuring it in the DockRay panel

There is one screen for the account and one for a project: Settings → Notification channels, and for a single project, Project settings → Notification channels. Editing requires the project-management permission, held by the developer role and above.

  1. Enable the Mattermost provider and paste the webhook address.
  2. For each event type, enter a channel name - Mattermost lets a webhook post to a channel other than the one it was created for, if one is given explicitly.
  3. Save. Leaving the address field blank on save means 'keep what is stored' - the credential never comes back to the form in plain text.

A project inherits the account's configuration by default and can override it with its own webhook, or turn a given event type off, independently of the account's settings.

The test message

Every event type has a Send test button. It posts a sample message down the exact path a real alert would take - it only works once the webhook address is saved or just entered and a channel is set. A successful test confirms the address is still active on the Mattermost side - webhooks do get deleted during integration clean-ups.

Keep reading

DockRay newsletter

Application security in your inbox

Important vulnerabilities, actionable guidance and practical advice for your applications. Choose your technologies and follow what matters to your project.

  • A daily digest of new vulnerabilities, critical ones included.
  • Notifications about important updates.
  • Practical advice on application security and monitoring.

Leave empty to receive updates for every technology.

Free to subscribe. Unsubscribe with one click in any email.