support Elastic SIEM as a events sink through webhook API