Integrate Slack for outbound notifications

Integrate Cortex XSIAM with Slack to forward issue and report notifications to dedicated workspace channels.

Integrate Cortex XSIAM with your Slack workspace to manage and highlight your issues and reports. Creating a Cortex XSIAM Slack channel ensures that defined issues are exposed on laptop and mobile devices using the Slack interface. Unlike email notifications, Slack channels provide dedicated spaces where you can contact specific members regarding your issues.

How to integrate Slack with Cortex XSIAM

1. Go to Settings → Configurations → Integrations → External Applications → Add Application and click Slack.
2. Click Ok to go to an external Slack page to install Cortex XSIAM on your Slack workspace.

   Note

   You are directed to the Slack browser to install Cortex XSIAM. You can only use this link to install Cortex XSIAM on Slack. Attempting to install from Slack Marketplace will redirect you to Cortex XSIAM documentation.
3. Click Submit.

   Upon successful installation, Cortex XSIAM displays the workspace to which you connected.

What to do next

After you integrate with your Slack workspace, configure your forwarding settings. For more information, see Configure notification forwarding. To send notifications about failed reports to Slack, see Run or schedule reports.