Create a Slack App
Create Slack Token
channels:join
- Join public channels in a workspacechannels:read
- View basic information about public channels in a workspacechat:write
- Send messages as <app>files:write
- Upload, edit, and delete files as <app>users:read
- View people in a workspaceusers:read.email
- View email addresses of people in a workspacegroups:read
- View basic information about private channels that your slack app has been added toCreate Slack Webhook
config.yml
file:
Slack config as CLI params
Slack config as in config.yml
edr monitor
if you used config.yml
. Please note that when you specify the —slack-channel-name, it’s the
default channel name to which all the alerts will be sent that are not attributed to any custom channel. Therefore,
if you execute several edr monitor
commands at the same time with different slack-channel-name
arguments, they can
be sent to the wrong one due to the overlap accessing the backend table of elementary. For avoiding this problem,
the guide can be followed.