Slack
Slack Integration¶
Channel Integrations is the fourth sub-section of Workspace Manager.
This section is used to integrate external services with AccuKnox and export logs based on triggers.
- Slack
Choose "Slack" services and click the Integrate Now button.
1. Integration of Slack:¶
a. Prerequisites:¶
- You need a valid and active account in Slack.
- After logging into your Slack channel, you must generate a Hook URL.
- [Note]: If you don’t know how to get Hook URL then click this link and follow the steps.
b. Steps to Integrate:¶
- Goto Channel Integration URL
- Click the Integrate Now button -> Slack
- Here you'll be able to see these entries:
- Integration Name: Enter the name for the integration. You can set any name.
- Hook URL: Enter your slack hook URL here.
- Sender Name: Enter the sender name here.
- Channel Name: Enter your slack channel name here.
- Message Title: You can set a message title using this input field. This is optional.
- Tags to be sent with alerts: You can set tags using this input field. This is optional.
- Once you fill every field then click the button this will test whether your integration is working or not.
- Click the Save button.
2. Configuration of Alert Triggers:¶
- On the Logs page, after choosing specific log filter click on 'Create Trigger' button.
- The below fields needs to be entered with appropriate data:
- Name: Enter the name for the trigger. You can set any name without special characters.
- When to Initiate: The frequency of the trigger as Real Time / .
- Status: Enter the severity for the trigger.
- Search Filter Data : The filter log chosen in automatically populated here.This is optional.
- Predefined queries: The list of predefined queries for this workspace is shown as default.
- Notification Channel: Select the integration channel that needs to receive logs. This should be Slack. (Note: Channel Integration is done on the previous step)
- Save: Click on Save for the trigger to get stored in database.
3. Logs Forwarding:¶
- For each Enabled Trigger, please check the Slack channel to view the logs.
- Based on Frequency (Real Time / Once in a Day / Week)
- The Rule Engine matches the real time logs against the triggers created.