Adding an SIEM Connector for a Webhook

You can add an SIEM connector for webhook applications such as Microsoft Teams and Slack.

Before You Begin

Add a webhook.

Procedure

1. From the navigation pane, go to Manage > System.

   The System page appears.

2. Click the SIEM connector tile.

   The SIEM Connector page appears.

3. Click Add connector.

   The Add A SIEM Connector page appears.

4. On the General tab, enter the following information:

   • Connector name: Enter a name for the connector.

   • Connector type: From the list, select Webhook.

   • Streaming data: From the list, select the data that you want to send to the webhook.

5. Click Next.

6. On the Connector Definition tab, enter the following information:

   • Webhook: Type the name of the webhook, then select a webhook from the list.

   • Alerts, Audit, and Events Template: You must provide the template that is suitable for the particular third-party webhook application that you configured.

7. Click Submit.