Allow incoming webhooks for Webex teams

This task enables Webex Teams to receive event notifications from Cisco Defense Orchestrator through an incoming webhook and a configured service integration.

  • Create a webhook in Webex and register it in CDO to deliver notifications to a selected space.

Perform this task when you want alerts to post into a Webex space or as automated bot messages.

Use Webex App Hub to create the webhook, then add it in your notification settings as a service integration.

  • You need access to both Webex and your orchestration tenant.

Before you begin

Security Cloud Control notifications appear in a designated workspace or as an automated bot in a private message. You must have the following before completing this procedure:

  • A Webex account.

  • A Security Cloud Control account and tenant.

Follow these steps to allow incoming webhooks for Webex Teams:

Procedure

Step 1

Open the Webex apphub.

Step 2

Click Connect.

Step 3

Scroll to the bottom of the page and configure these settings:

  • Webhook name - Provide a name to identify the messages provided by this application.

  • Select a space - Use the drop-down menu to choose a Webex Space. The Space must already exist in Webex team and you must have access to this space. If a space does not exist, you can create a new space in Webex Teams and refresh the application's configuration page to display the new space.

Note

If a Webex incoming webhook has been configured in the past and you are re-enabling it, the previous webhooks are preserved at the bottom of this page. You can delete previous webhooks if they are no longer needed or if the Webex space no longer exists.

Step 4

Select Add. The Webex Space you chose will receive a notification that the application is added.

Step 5

Copy the Webhook URL.

Step 6

Log into Security Cloud Control.

Step 7

In the left pane, click Administration > Notification Settings.

Step 8

Examine and confirm the notifications that are checked are correct. If they are not, we strongly recommend modifying the notification selection before you connect to a service integration.

Step 9

Scroll to Service Integrations.

Step 10

Click the blue plus button.

Step 11

Enter a Name. This name appears in Security Cloud Control as a configured service integration. It does not appear in any events forwarded to the configured service.

Step 12

Expand the drop-down menu and select Webex as the Service Type.

Step 13

Paste the webhook URL that you generated from the service.

Step 14

Click OK.

The Webex space confirms the application is added, and the service integration is saved. Notifications from CDO are sent to the selected space through the configured incoming webhook.