Since the web service uses the "event name" and timestamp to generate a custom notification.
It pulls information from several services, including our ELK stack, and includes it in the custom notification along with the typical Cloudwatch Alert data. The web service then sends the custom notification to the original SNS notification group to be distributed.
I hope that will help you resolve your query.