Slack Integration

Slack brings team communication and collaboration into one place so you can get more work done, whether you belong to a large enterprise or a small business. This integration allows Cisco XDR users to leverage Slack as a team collaboration and communication tool in Automation workflows, including incident notification and response.

  1. In the Cisco XDR navigation menu, choose Administration > Integrations.

  2. On the Integrations page, click the Third-Party tab and navigate to the Slack integration.

  3. Click the plus sign (+) in the lower-right corner of the card. The Slack integration page is displayed.

  4. Expand the Integration Guide area and follow the instructions on how to add the Slack integration in Cisco XDR.

You can perform the following tasks after you integrate Slack with Cisco XDR:

  • Automation:

    • Atomic Actions - The atomic actions for Slack can be used as building blocks in custom workflows. These can be found as available Actions in the left menu of the Workflow Editor. See Atomic Actions and Workflows.

    • Workflows - The workflows for Slack can be installed from the Automation Exchange. See Workflows and Exchange.

    • Target - The Slack target is automatically created for out-of-box and custom workflows. See Targets Created From Integrations.

    • Playbooks - An Automation system workflow that uses Slack and is included in the Cisco Managed Incident Playbook can be used to Confirm Incident. See Identification on the Response page.