Why Microsoft Teams?
Teams is ideal for organizations using Microsoft 365:- Real-time: Alerts appear instantly in channels
- Contextual: Team can discuss and coordinate in threads
- Actionable: Click through to AnomalyArmor for details
- Integrated: Works with your existing Microsoft ecosystem
Prerequisites
Before you begin:- Microsoft Teams account with permission to add connectors (or admin who can approve)
- AnomalyArmor account with alert configuration permissions
- A Teams channel where you want to receive alerts
Setup Guide
Step 1: Create an Incoming Webhook in Teams
- Open Microsoft Teams
- Navigate to the channel where you want alerts
- Click the … menu next to the channel name
- Select Connectors (or Manage channel → Connectors)
- Find Incoming Webhook and click Configure
- Give it a name: “AnomalyArmor Alerts”
- Optionally upload the AnomalyArmor logo
- Click Create
- Copy the webhook URL - you’ll need this in AnomalyArmor
Step 2: Add Destination in AnomalyArmor
- Log in to AnomalyArmor
- Click Alerts in the left sidebar
- Select Destinations tab
- Click Add Destination
- Select Microsoft Teams
Step 3: Configure the Destination
| Field | Description |
|---|---|
| Destination Name | A descriptive name (e.g., “Teams - #data-alerts”) |
| Webhook URL | Paste the URL copied from Teams |
Step 4: Test the Connection
Click Send Test Alert to verify everything works:Step 5: Save
Click Save to complete the setup. Your Teams destination is now ready to use in alert rules.Alert Message Format
AnomalyArmor sends Adaptive Cards to Teams with:- Alert type indicator (schema, freshness, discovery)
- Affected asset details
- Change description
- Timestamp
- Action button to view in AnomalyArmor
Best Practices
Channel Selection
- Create dedicated alert channels (e.g.,
Data Alerts) - Don’t send to busy general channels
- Separate by urgency: breaking changes vs informational
Webhook Management
- Rotate webhook URLs periodically for security
- Document which webhooks are used where
- Delete unused webhooks from Teams
Troubleshooting
”Webhook URL invalid”
Cause: The webhook URL is malformed or expired. Fix:- Regenerate the webhook in Teams
- Copy the new URL carefully (it’s long)
- Update the destination in AnomalyArmor
Messages not appearing
Cause: Webhook deleted or channel permissions changed. Fix:- Verify the webhook still exists in Teams channel settings
- Recreate the webhook if needed
- Update AnomalyArmor with the new URL
Rate limiting
Cause: Too many alerts in a short period. Fix:- Review alert rules to reduce volume
- Consider email for high-volume, low-priority alerts
- Teams webhooks have rate limits (~4 messages/second)
Security
Data Sent to Teams
Alert messages contain:- Asset names (table/column names)
- Change types (added, removed, modified)
- Timestamps
- Actual data values
- Database credentials
- Connection strings
Revoking Access
To disconnect:- In Teams: Remove the Incoming Webhook connector from the channel
- In AnomalyArmor: Delete the Teams destination
Next Steps
Alert Rules
Create rules that route to Teams
Best Practices
Reduce alert fatigue
