@mikehopkins I checked my webhook alerts in history, and I can see alertType like "appliances went down/up", "switches went down/up", and "cameras went down/up". I also ran a quick verification on an appliance. Here is the alert. As you can see, the alert type is "appliances went down," while alertTypeId is "stopped_reporting". So you are right about the sample.
{
"version": "0.1",
"sharedSecret": "",
"sentAt": "2022-12-27T08:45:16.808865Z",
"organizationId": REMOVED FOR PRIVACY,
"organizationName":REMOVED FOR PRIVACY,
"organizationUrl":REMOVED FOR PRIVACY,
"networkId":REMOVED FOR PRIVACY,
"networkName":REMOVED FOR PRIVACY,
"networkUrl":REMOVED FOR PRIVACY,
"networkTags": [REMOVED FOR PRIVACY
],
"deviceSerial":REMOVED FOR PRIVACY,
"deviceMac":REMOVED FOR PRIVACY,
"deviceName": "",
"deviceUrl":REMOVED FOR PRIVACY,
"deviceTags": [],
"deviceModel": "MX65",
"alertId": "646829496510174305",
"alertType": "appliances went down",
"alertTypeId": "stopped_reporting",
"alertLevel": "critical",
"occurredAt": "2022-12-27T08:40:09.000000Z",
"alertData": {}
}