Destinations
Add destinations under Egress & notifications in Settings › Integrations, then select one in a playbook's Notify / ticket block.
| Destination | Notes |
|---|---|
| Webhook | JSON payload, with an optional bearer token and HMAC signature so the receiver can verify origin. |
| Slack | Incoming webhook. |
| Microsoft Teams | Incoming webhook. |
| Discord | Incoming webhook. |
| SMTP. | |
| Jira | Creates an issue in a project. |
| TheHive | Creates an alert. |
| Upstream SIEM | Forwards the alert as an event to another SIEM's collector. |
Notifications
Set Send SOC notifications here to yes on a webhook, Slack, Teams, Discord or email destination to deliver team notifications there too. On an email destination, Send customer notifications here delivers customer notifications, addressed to the organization's contacts. See Notifications.
Delivery
Notifications › Delivery shows every notification that was sent, where, and whether it succeeded.