Enable incoming webhooks for a custom integration

Enable a custom service integration that accepts incoming webhooks so event notifications can be forwarded to your webhook endpoint.

If you integrate a custom service or application, the management system sends a JSON message to the webhook URL that you configure.

Use this task when you have a service that supports incoming webhooks and you want to connect it as a service integration.

Before you begin

Security Cloud Control does not format messages for custom integration. If you opt to integrate a custom service or application, Security Cloud Control sends a JSON message.

Refer to the service's documentation on how to enable incoming webhooks and generate a webhook URL. Once you have a webhook URL, use the procedure below to enable webhooks:

Follow these steps to enable incoming webhooks for a custom integration:

Procedure

Step 1

Generate and copy the webhook URL from the custom service or application of your choice.

Step 2

Log into Security Cloud Control.

Step 3

In the left pane, click Administration > Notification Settings.

Step 4

Examine and confirm the notifications that are checked are correct. If they are not, we strongly recommend modifying the notification selection before you connect to a service integration.

Step 5

Scroll to Service Integrations.

Step 6

Click the blue plus button.

Step 7

Enter a Name. This name appears in Security Cloud Control as a configured service integration. It does not appear in any events forwarded to the configured service.

Step 8

Expand the drop-down menu and select Custom as the Service Type.

Step 9

Paste the webhook URL that you generated from the service.

Step 10

Click OK.

The custom service integration is configured with the webhook URL, and event notifications are forwarded as JSON to the specified endpoint.