Post-Message-Slack
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
Author: Yaniv Shasha
| Attribute | Value |
|---|---|
| Type | Playbook |
| Solution | SentinelSOARessentials |
| Source | View on GitHub |
Additional Documentation
📄 Source: Post-Message-Slack/readme.md
Author: Yaniv Shasha
Summary
This playbook will post a message in a Slack channel when an alert or incident is created in Microsoft Sentinel.
Prerequisites
- A Slack account and user credentials with permission to post to the target channel.
Deployment Instructions
Deploy with Incident Trigger (Recommended)
After deployment, attach this playbook to an automation rule so it runs when the incident is created.
Learn more about automation rules
Deploy with Alert Trigger
After deployment, you can run this playbook manually on an alert or attach it to an analytics rule so it will run when an alert is created.
Post-deployment Instructions
- Open the Logic App in the Azure portal.
- Click the Slack connector resource.
- Click Edit API connection.
- Click Authorize and sign in with your Slack account.
- Click Save.
- Repeat for other connections if needed.
Note: The message will be sent from the user who creates the connection.
Screenshots
Incident Trigger
Alert Trigger
Slack
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊