---
title: Tines connector
description: The Tines connector uses Tines's Webhook actions to send events via POST request. You can create connectors in Stack Management > Connectors or as needed...
url: https://www.elastic.co/docs/reference/kibana/connectors-kibana/tines-action-type
products:
  - Kibana
applies_to:
  - Serverless Observability projects: Generally available
  - Serverless Security projects: Generally available
  - Elastic Stack: Generally available
---

# Tines connector
The Tines connector uses Tines's [Webhook actions](https://www.tines.com/docs/actions/types/webhook) to send events via POST request.

## Create connectors in Kibana

You can create connectors in **Stack Management > Connectors** or as needed when you’re creating a rule. For example:
![Tines connector](https://www.elastic.co/docs/reference/kibana/images/tines-connector.png)


### Connector configuration

Tines connectors have the following configuration properties:
<definitions>
  <definition term="URL">
    The Tines tenant URL. If you are using the [`xpack.actions.allowedHosts`](/docs/reference/kibana/configuration-reference/alerting-settings#action-settings) setting, make sure the hostname is added to the allowed hosts.
  </definition>
  <definition term="Email">
    The email used to sign in to Tines.
  </definition>
  <definition term="API Token">
    A Tines API token created by the user. For more information, refer to the [Tines documentation](https://www.tines.com/api/authentication#generate-api-token).
  </definition>
</definitions>


## Test connectors

You can test connectors as you're creating or editing the connector in Kibana. For example:
![Tines params test](https://www.elastic.co/docs/reference/kibana/images/tines-params-test.png)

If you create a rule action that uses the Tines connector, you can likewise configure the POST request that is sent to the Tines webhook action when the rule conditions are met.

### Webhook URL fallback

It is possible that requests to the Tines API to get the stories and webhooks for the selectors hit the 500 results limit. In this scenario, the webhook URL fallback text field will be displayed. You can still use the selectors if the story or webhook exists in the 500 options loaded. Otherwise, you can paste the webhook URL in the test input field; it can be copied from the Tines webhook configuration.
When the webhook URL is defined, the connector will use it directly when an action runs, and the story and webhook selectors will be disabled and ignored. To re-enable the story and webhook selectors, remove the webhook URL value.
![Tines Webhook URL fallback](https://www.elastic.co/docs/reference/kibana/images/tines-webhook-url-fallback.png)


## Tines story library

In order to simplify the integration with Elastic, Tines offers a set of pre-defined Elastic stories in the Story library. They can be found by searching for "Elastic" in the [Tines Story library](https://www.tines.com/story-library?s=elastic):
![Tines Elastic stories](https://www.elastic.co/docs/reference/kibana/images/tines_elastic_stories.png)

They can be imported directly into your Tines tenant.

## Format

Tines connector will send the data in JSON format.
The message contains fields such as `alertId`, `date`, `_index`, `kibanaBaseUrl`, along with the `rule` and `params` objects.
The number of alerts (signals) can be found at `state.signals_count`.
The alerts (signals) data is stored in the `context.alerts` array, following the [ECS](https://www.elastic.co/docs/reference/ecs/ecs-field-reference) format.