Notifications & External Channels
View notifications, configure delivery channels, and enable automatic event notifications
The notification center aggregates site-wide, team, and personal notifications, with search, unread filtering, and mark-as-read. Automatic notifications are triggered by system events, and administrators can select event types and external channels.
View Notifications
Navigate to Notifications and filter by scope, priority, and type. Notification types include announcements, security, pending, status updates, and general notifications. Document processing, workflow runs, Agent publishing, API Key expiration, quota, and security events can trigger automatic notifications.
Configure Channels
In Site settings > Notification channels, select Email, DingTalk, WeCom, Feishu, Slack, or Webhook. Fill in the channel credentials and send a test message; do not put signing secrets in URL query parameters. When a webhook_secret is configured for the Webhook channel, outgoing requests include X-Webhook-Signature: sha256=<hex> and X-Webhook-Signature-256: <hex> — HMAC-SHA256 over the raw body; receivers should verify against the raw body with constant-time comparison.
Automatic Notifications
On the Automatic notifications page:
- Select the global external channel.
- Enable events grouped by team, user, knowledge base, workflow, Agent, API Key, and security (about 18 default event types).
- After saving, verify in-app and external status with a test event.
Default events include document processing, workflow runs, Agent publish/unpublish, API Key expiring/expired, anomalous login, account lockout, and password change. The API Key expiration check runs via Celery Beat daily at 09:00, with reminders 7, 3, and 1 day before expiration. Anomalous-login detection keeps the last 30 days, up to 10 IPs and 10 devices per user; logging in from a new IP or device triggers an anomaly notification.
External delivery states include pending, sending, sent, and failed; failures record retry counts. Do not rely on external channels alone — confirm important security events in the notification center and audit log as well.
How is this guide?