Qlik Cloud system events

Qlik Cloud system events allow you to subscribe to events and react to changes in real time within your tenant.

Use cases

By using webhooks, the Audits API, and Automations, you can respond instantly to events such as user actions, app changes, or data reloads.

Some use cases include:

Slack notifications: notify your team whenever a new app is created in Qlik Cloud automatically.
Welcome emails: send automated welcome emails when new users are added to your tenant.
Automated updates: update records in an external system automatically when users are removed.

Authentication and security

Secure webhook endpoints

To secure webhook endpoints:

Use HTTPS: always host your webhook endpoint over HTTPS to encrypt data during transmission.
Authenticate requests: implement authentication mechanisms to verify that requests are coming from Qlik Cloud.

Verify webhook payload signature

Qlik Cloud signs webhook payloads using a secret key that you provide during webhook registration. You should verify the signature to ensure that requests are coming from Qlik Cloud. To verify webhook signatures:

Retrieve the signature from the Qlik-Signature header attached to the request.
Use your secret key and the request body to compute the HMAC SHA256 hash.
Compare the computed HMAC SHA256 hash with the signature from the Qlik-Signature header.

If the signatures match, proceed to process the event. If not, reject the request.

For more information about webhooks, see Webhooks on Qlik Help.