Integrate Slack for outbound notifications

Learn how to integrate Cortex XDR with your Slack workspace and stay updated on important alerts and events.

Integrate Cortex XDR with your Slack workspace to manage and highlight your alerts and reports. Creating a Cortex XDR Slack channel ensures that defined alerts are exposed on laptop and mobile devices using the Slack interface. Unlike email notifications, Slack channels provide dedicated spaces where you can contact specific members regarding your alerts.

How to integrate Slack with Cortex XDR

1. From Cortex XDR, select Settings → Configurations → Integrations → External Applications.
2. Select the provided link to install Cortex XDR on your Slack workspace.

   Note

   You are directed to the Slack browser to install Cortex XDR. You can only use this link to install Cortex XDR on Slack. Attempting to install from Slack Marketplace will redirect you to Cortex XDR documentation.
3. Click Submit.

   Upon successful installation, Cortex XDR displays the workspace to which you connected.

What to do next

After you integrate with your Slack workspace, configure your forwarding settings. For more information see, Configure notification forwarding.