added generic http event streaming docs (#365)

* added generic http event streaming docs

* minor fix

* rename to mdx

* minor fix

Author: crn4

public/docs-static/img/how-to-guides/activity-event-streaming/event-streaming-integration.png

@@ -174,6 +174,7 @@ export const docsNavigation = [
                          { title: 'Datadog', href: '/how-to/stream-activity-to-datadog' },
                          { title: 'Amazon S3', href: '/how-to/stream-activity-to-amazon-s3' },
                          { title: 'Amazon Firehose', href: '/how-to/stream-activity-to-amazon-firehose'},
+                         { title: 'Generic HTTP', href: '/how-to/stream-activity-to-generic-http'},
                      ]
                  },
              ],

public/docs-static/img/how-to-guides/activity-event-streaming/generic-http/body-template-config.png

@@ -9,7 +9,7 @@ detecting, and responding to security threats in real-time. By aggregating and a
 SIEMs help identify anomalous patterns and potential breaches, providing a centralized view of security events.
 
 NetBird provides an event streaming feature that allows you to stream network [activity events](/how-to/monitor-system-and-network-activity)
-to third-party SIEM systems, such as [Datadog](https://www.datadoghq.com/dg/security/siem-solution/), [Amazon S3](https://aws.amazon.com/s3/), [Amazon Data Firehose](https://aws.amazon.com/firehose/), and others.
+to third-party SIEM systems, such as [Datadog](https://www.datadoghq.com/dg/security/siem-solution/), [Amazon S3](https://aws.amazon.com/s3/), [Amazon Data Firehose](https://aws.amazon.com/firehose/), and others through a generic HTTP integration.
 
 <Note>
     This feature is only available in the cloud version of NetBird.
@@ -20,4 +20,5 @@ supported third-party platforms. To get started, select one of the following int
 
 - [Datadog](/how-to/stream-activity-to-datadog)
 - [Amazon S3](/how-to/stream-activity-to-amazon-s3)
-- [Amazon Data Firehose](/how-to/stream-activity-to-amazon-firehose)
+- [Amazon Data Firehose](/how-to/stream-activity-to-amazon-firehose)
+- [Generic HTTP](/how-to/stream-activity-to-generic-http)

public/docs-static/img/how-to-guides/activity-event-streaming/generic-http/danger-zone.png

@@ -0,0 +1,97 @@
+# Stream Network Activity to a Generic HTTP Endpoint
+
+The Generic HTTP integration allows you to stream your NetBird network activity events to any custom HTTP/S endpoint. This provides a flexible way to connect NetBird with a wide range of third-party systems, including custom SIEMs, log management tools like Grafana Loki, or any service that can receive POST requests.
+
+For every event, NetBird will send a POST request to your configured endpoint. You have full control over the request's body format and headers, allowing for seamless integration with various APIs.
+
+<Note>
+    This feature is only available in the cloud version of NetBird.
+</Note>
+
+## Prerequisites
+
+Before you start, ensure you have an HTTP/S endpoint that is publicly accessible and ready to receive POST requests from NetBird. You will also need any necessary authentication details, such as an API key or credentials for Basic Authentication.
+
+## Create an Integration in NetBird
+
+1.  Navigate to the **Integrations** tab in the NetBird dashboard and select **Event Streaming**.
+2.  Find the **Generic HTTP** option and click **Connect**.
+3.  A configuration panel will open with several tabs: **General**, **Headers**, **Body Template**, and **Danger Zone**.
+
+### General Configuration
+
+This tab is for the essential endpoint details.
+
+<p>
+    <img src="/docs-static/img/how-to-guides/activity-event-streaming/generic-http/general-config.png" alt="Generic HTTP General Configuration" className="imagewrapper-big"/>
+</p>
+
+-   **Endpoint URL**: Enter the full HTTPS or HTTP URL where NetBird should send the events. This field is mandatory.
+-   **Authentication**: Select the authentication method required by your endpoint.
+    -   **No Authentication**: Sends requests without an `Authorization` header.
+    -   **Bearer Token**: Adds an `Authorization: Bearer <your-token>` header to each request. You will need to provide your API key or token.
+    -   **Basic Auth**: Adds an `Authorization: Basic <credentials>` header. You must provide the credentials in the format `username:password`.
+
+### HTTP Headers (Optional)
+
+You can add custom HTTP headers to every outgoing request in the **Headers** tab. This is useful for passing static tokens, setting a custom `Content-Type`, or other API requirements. By default, the `Content-Type` is `application/json`.
+
+<p>
+    <img src="/docs-static/img/how-to-guides/activity-event-streaming/generic-http/headers-config.png" alt="Generic HTTP Headers Configuration" className="imagewrapper-big"/>
+</p>
+
+### Custom Body Template (Optional)
+
+The **Body Template** tab gives you powerful control over the structure of the JSON payload sent to your endpoint.
+
+<p>
+    <img src="/docs-static/img/how-to-guides/activity-event-streaming/generic-http/body-template-config.png" alt="Generic HTTP Body Template Configuration" className="imagewrapper-big"/>
+</p>
+
+If this option is disabled, NetBird sends a default JSON object for each event. When enabled, you can define your own payload structure using Go's `text/template` templating engine.
+
+This is especially useful for integrating with services that expect a specific format, like Grafana Loki.
+
+#### Available Template Variables
+
+You can use the following variables from the `StreamEvent` object in your template:
+
+| Variable      | Type                 | Description                                                                          | Example Usage                     |
+|---------------|----------------------|--------------------------------------------------------------------------------------|-----------------------------------|
+| `.ID`         | `any`                | The unique ID of the event.                                                          | `{"event_id": "{{.ID}}"}`         |
+| `.Timestamp`  | `time.Time`          | The timestamp of when the event occurred. Can be formatted.                          | `{{.Timestamp.UnixNano}}` / `{{.Timestamp.Format "2006-01-02T15:04:05.999Z07:00"}}`          |
+| `.Message`    | `string`             | A human-readable message describing the event.                            | `{"text": "{{.Message}}"}`        |
+| `.InitiatorID`| `string`             | The ID of the object that initiated the event (e.g., a user or peer ID).    | `{"user": "{{.InitiatorID}}"}`     |
+| `.TargetID`   | `string`             | The ID of the object that was affected by the event (e.g., a peer or group ID). | `{"resource": "{{.TargetID}}"}`    |
+| `.Meta`       | `map[string]any`     | A map containing additional metadata about the event.                                | `{"source": "{{.Meta.source}}"}`   |
+| `.Reference`  | `string`             | A URL to the event in the NetBird activity log for easy cross-referencing. | `{"ref": "{{.Reference}}"}`       |
+
+### Danger Zone
+
+This tab allows you to delete the integration. This action is irreversible and will immediately stop events from being sent to your endpoint.
+
+<p>
+    <img src="/docs-static/img/how-to-guides/activity-event-streaming/generic-http/danger-zone.png" alt="Generic HTTP Danger Zone" className="imagewrapper-big"/>
+</p>
+
+After configuring all settings, click **Save Changes**.
+
+## Verify the Integration
+
+Once you save the integration, NetBird sends a test event to your endpoint to confirm that the connection and authentication are successful.
+
+Check the logs of your receiving service for a new POST request. You should find a JSON payload similar to this (if custom template wasn't set up):
+
+```json
+{
+    "ID": "test-event-1685635200",
+    "Timestamp": "2025-06-01T16:00:00Z",
+    "Message": "integration test event for generic http endpoint",
+    "InitiatorID": "netbird-test-system",
+    "TargetID": "target-id",
+    "Meta": {
+        "purpose": "configuration-test",
+        "source": "netbird-test"
+    },
+    "Reference": "netbird:test:generichttp"
+}