1stLineby Burava Contact us

Payload extraction

Extract fields from any payload.

The alert producer sends receiver-native JSON. 1stLine extracts fields in the middle.

1 receiver alert 2 source pattern 3 alert instance 4 transform 5 forwarded alert
Receiver message before 1stLine

[FIRING:1] Complex alert Test folder (business+test-label@burava.com bar 10.1.0.16:9091 prometheus P2 https://github.com/buravaOrg/1stLine/tree/main/alert-producer/alert.json)

**Firing**

Value: A=1, C=1, prometheus_ready=1, some_hardcoded_query=0.99789656

Labels: - alertname = Complex alert - Maintainer = business+test-label@burava.com - foo = bar - producer_folder = Test folder - instance = 10.1.0.16:9091 - job = prometheus - priority = P2 - test-complex-link = https://github.com/buravaOrg/1stLine/tree/main/alert-producer/alert.json - service = burava-checkout

Annotations:
- description = This is a multi-line description with some complex wording | / prometheus_ready

Source: https://producer.example/alerting/rule/ff8agsdpqd3b4d/view?orgId=1

Alert producer v12.3.1 ยท Added by producer test
Source Pattern
Producer Labels
Regex
s
1stLine alert instance
FIRING 5/12/2026, 8:44:38 PM a9828afd
[FIRING:1] Complex alert Test folder (business+test-label@burava.com bar 10.1.0.16:9091 prometheus P2)
foobar jobprometheus instance10.1.0.16:9091 priorityP2 alertnameComplex alert maintainerbusiness+test-label@burava.com serviceburava-checkout

This is a multi-line description with some complex wording
/ prometheus_ready

Pattern transformation
service
attachments.0.text
Parse and extract.

Our pattern extraction engine combines high-level regex operations to parse payloads into fields that can later drive escalation and routing conditions. Parse any field from any alert producer to any destination receiver.

Transform before proxying.

The same patterns can be mirrored into dynamic payload transformations, adding system information, alert actions, and your own custom data before the message is proxied.

Choose from library schemas.

Start from predefined alert payload schemas for popular producer and receiver pairs, including Grafana, Slack, Discord, Prometheus, AWS SNS, Alertmanager, Uptime Kuma, Datadog, and custom webhooks.

Grafana, Slack, Discord, Prometheus, AWS SNS, Alertmanager, Uptime Kuma, Datadog, and any other product or company names are trademarks or registered trademarks of their respective owners.