docs/admin-guide/guides/event-streaming.mdx
Event Streaming forwards platform audit events to a webhook URL of your choice. The most common pattern is to point that webhook at a flow inside Activepieces — your flow then routes each event to the channel you care about (Slack, Gmail, Microsoft Teams, custom HTTP, etc.).
Use it to react to flow run failures, new sign-ins, project releases, or any other audit event with the alerting tool of your choice.
The fastest way to get going is the Generate handler flow button in the New destination dialog. It builds a webhook-triggered flow with one router branch per event you select, plus a nested branch for failed runs when you pick flow.run.finished.
You can subscribe a destination to any audit event — flow lifecycle, run status, folder/connection changes, user activity, and platform admin actions. See the Audit Log Events catalog for the full list and per-event payload details.
If you already have a webhook URL — or you want to point Event Streaming at a SIEM, data warehouse, or any other external system — you can skip the handler flow and configure the destination by hand:
Every event is delivered as an HTTP POST with a JSON body. The top-level fields are:
action — the event name (for example flow.run.finished).data — event-specific payload, including details like the flow id, run id, status, or affected user.id, created, updated — event identifiers and timestamps.platformId, projectId, userId — context fields shared across all events.