Overview
Xilnex Event Hub is an integration framework that enables your system to automatically dispatch real-time notifications to external applications whenever a defined business action occurs — such as completing a sale, creating a client, or processing a payment.
The setup is built on two core components:
- Event Trigger — defines which business event to monitor
- Webhook Configuration — defines where to route the notification when that event fires
Prerequisites
Before proceeding, ensure you have:
- Active login credentials to the Xilnex Portal
- The API endpoint URL of the receiving external system
- A webhook secret key (provided by your IT or integration team)
Event Hub Setup Flow
- Log in to Xilnex Portal
- ↓
- Navigate to Xilnex Event Hub
- ↓
- Create an Event Trigger ← Define which event to monitor
- ↓
- Create a Webhook Configuration ← Define where to send the notification
- ↓
- Repeat webhook creation for each additional receiving system
- (same Event Trigger, multiple destinations)
Step-by-Step Guide
Step 1 — Log In to Xilnex Portal
Step 2 — Navigate to Xilnex Event Hub
Access the Event Hub via either of the following methods:
Global Search
- Click the Search Bar at the top-right corner of the portal.
- Type event.
- Select Xilnex Event Hub from the search results.

Side Navigation
- Click System Configuration in the left navigation menu.
- Under General System Settings, select Xilnex Event Hub.

Step 3 — Understand the Event Hub Dashboard
The Event Hub dashboard is organized into three functional sections:
| Section | Purpose |
|---|
| Event Logs | Audit trail of all triggered events — includes timestamp, status, and payload details |
| Webhook Configuration | Register and manage the external API endpoints that receive event notifications |
| Event Trigger | Define and activate the specific business events to monitor |
Step 4 — Create an Event Trigger

An Event Trigger instructs Xilnex which business event to monitor. Each event type only requires one trigger, configured once.
- From the dashboard, click Event Trigger.
- Click New at the top-right corner. A configuration dialog will appear.
Complete the following fields:

| Field | Description | Required |
|---|
| Event Trigger Name | A clear, descriptive label for this trigger (e.g., Complete Sales Output) | ✅ Yes |
| Remark | Optional internal notes for reference | ❌ No |
| Event Name | Select the target business event from the dropdown (see full event list below) | ✅ Yes |
Click SAVE to activate the trigger.
See
here for all event lists
Step 5 — Create a Webhook Configuration

A Webhook Configuration defines the destination endpoint that receives the event payload. You may register multiple webhooks against the same Event Trigger — this is the recommended approach when multiple external systems need to consume the same event.
Prerequisite: The relevant Event Trigger (Step 4) must exist before creating a webhook.
- From the dashboard, click Webhook Configuration.
- Click New at the top-right corner. A configuration dialog will appear.
- Complete the following fields:
| Field | Description | Example |
|---|
| Webhook Name | An identifier for the receiving system | SAP Receive Complete Sales |
| Description | Brief explanation of this webhook's function | Notify SAP upon sale completion |
| URL | The API endpoint of the receiving system | https://your-system.com/api/receive |
| Request Method | HTTP method expected by the receiver | POST |
| Secret | Shared key used to verify request authenticity (see below) | Provided by your IT team |
| Event Trigger | The trigger this webhook responds to | Complete Sales Output |
Webhook Signature Verification
To validate that incoming requests originate from Xilnex, implement the following verification logic on the receiving system:
- Retrieve the signature from the request header: xilnex-webhook-signature
- Extract the raw request body (unparsed)
- Hash the raw body using HMAC-SHA256 with the shared secret
- Compare the computed hash against the header signature — if they match, the request is authentic
- If signature verification is not required by your receiving system, enter any placeholder value (e.g., -) in the Secret field.