# Event Hooks

Receives real-time event data from Okta via webhooks for immediate security monitoring and incident response.

**Sync Type: Push (Webhook)**

## Overview

This input receives events directly from Okta via their Event Hooks feature, providing real-time data ingestion instead of polling the Okta API. Events are pushed to Monad as they occur in your Okta tenant.

## Prerequisites

- Okta account with administrative privileges
- Monad API key ([API Key Requirements](/docs/components/inputs/monad/monad-http#api-key-requirements))

## Setup

### Step 1: Create the Input in Monad

1. Create an **Okta Event Hooks** input and add it to a pipeline.
2. Copy the **Pipeline ID** from the pipeline details page.

### Step 2: Configure the Event Hook in Okta

1. Log into your Okta Admin Console.
2. Navigate to **Workflow** > **Event Hooks**.
3. Click **Create Event Hook**.
4. Fill in the following details:
- **Name**: Enter a name for the event hook (e.g., "Monad Event Hook")
- **URL**: `https://app.monad.com/api/v2/http/send/{pipeline_id}` (replace `{pipeline_id}` with your Pipeline ID)
- **Authentication field**: `Authorization`
- **Authentication secret**: `ApiKey {api-key}` (replace `{api-key}` with your Monad API key)
- **Custom header fields**: Leave blank (additional headers will be ignored)
- **Subscribe to events**: Select the events you want to send to Monad
5. Click **Save & Continue**.
6. Click **Verify** to confirm the connection is working.

## Important Notes

- Okta event hooks are sent in batches with multiple events at the JSON path `data.events`. Monad processes each event in the batch individually.

## Related Articles

- [Okta Event Hooks Documentation](https://developer.okta.com/docs/concepts/event-hooks/)
- [Okta Event Types Catalog](https://developer.okta.com/docs/reference/api/event-types/)