# How To Send Alerts With BetterShield Ultra?

Send BetterShield alerts or selected activity to Slack, a JSON webhook, a syslog collector or email addresses with BetterShield Ultra.

In **[BetterShield Ultra](/ultra/)**, **BetterShield › Ultra › Alert channels** can send to up to five saved destinations. No destination exists until you add one. Site email alerts remain separate. A destination that sends alerts can also carry [rules](/docs/alert-channel-rules/) for chosen activity.

_**Note:** These controls require the paid [BetterShield Ultra](/ultra/) add-on alongside the free BetterShield plugin._

<span id="set-it-up" aria-hidden="true"></span>

## Step 1: Open Add a Destination

Select **Add a Destination** and choose **Send to**.

<figure class="doc-shot">
  <img src="/docs/screenshots/alert-destinations.png" alt="Send Ultra alerts or activity to another destination: saved state and available controls in BetterShield." width="982" height="270" loading="lazy" decoding="async">
  <figcaption>Review the state and choices shown on your own site before applying a change.</figcaption>
</figure>

## Step 2: Send Alerts

- Give it a **Name** and enter the fields required by its kind.
- Choose **Alerts only** or **All activity (full activity log)** where offered. For alerts, the default is **High and critical**; **Critical only** is also offered. For full activity, choose the activity types.
- Save before pressing **Send a Test Message**. Tests use the saved destination, not unsaved fields.

| Destination | Configuration |
| --- | --- |
| Slack | An HTTPS incoming webhook. |
| Microsoft Teams (Workflows) | A Workflows webhook. Retired Office 365 connector addresses are refused. |
| Google Chat | A webhook created in the space’s Apps and integrations. |
| Discord | A webhook from the channel’s Integrations settings. |
| Other service (webhook) | HTTPS address, format and any required connector key. |
| Server log system (syslog) | Host, port, facility, transport and format. Public collectors require TLS; a private collector requires the explicit private-network choice. |
| PagerDuty or Opsgenie | Incident paging, with the service’s region and connector requirements. |
| Help desk (by email) | The address that creates help-desk tickets. |
| Email | One or more addresses under **Email addresses**, up to five, separated by commas. It sends alerts only, through this site's mail. See [rules and the email channel](/docs/alert-channel-rules/). |

Webhook formats include standard JSON, one event per line, Splunk HTTP Event Collector, Datadog Logs and Elastic bulk API. The screen identifies which key belongs in WordPress Connectors and the minimum WordPress version needed; the add-on does not store the collector key itself. Review regional intake addresses.

## Recommended settings

Our advice is to use alerts for people and full activity for a log platform. Limit recipients and service access because event details leave the site. Configure [incident destinations](/docs/incident-destinations/) and [escalation](/docs/incident-escalation/) only when someone will respond.

## What it can break and how to undo

A wrong address, key or format prevents delivery. Correct and save the destination or remove it to stop future messages. Webhook addresses are not shown back after saving; leave the address blank to keep the saved value. Muting alerts also mutes alert-carrying destinations, email destinations and rules included, but does not stop full-activity delivery.

<span id="check-it-is-working" aria-hidden="true"></span>

## Final Outcome

Use the test result and inspect the actual receiving service. UDP cannot confirm delivery. Paging tests open and close a test alert. Failed sends and retry results remain distinguishable from delivered messages.

<figure class="doc-shot">
  <img src="/docs/screenshots/alert-destinations.png" alt="Send Ultra alerts or activity to another destination: saved state and available controls in BetterShield." width="982" height="270" loading="lazy" decoding="async">
  <figcaption>Example Ultra destinations view. Check the saved values and status on your own site.</figcaption>
</figure>

## Related

- [Rules and the email channel](/docs/alert-channel-rules/)
- [Log checkpoints](/docs/activity-log-checkpoints/)
- [Incident destinations](/docs/incident-destinations/)
- [Incident escalation](/docs/incident-escalation/)
- [What BetterShield contacts](/docs/what-bettershield-contacts/)

This is how you can send alerts with BetterShield Ultra.

Getting Stuck? Feel free to contact our [Dedicated Support Team](/support/).