- Solutions
-
- File Server: Ransomware Protection
- File Server: File Copy
- File Server: Audit File Access
- File Server: Storage growth reporting
- Licensing/Pricing
- Contact
How to Integrate with Slack
Integrating with Slack is very easy with PA File Sight. The Call URL action can be used to post alerts to a Slack channel.
Before creating the Call URL action, you need to get an "Incoming WebHook" integration URL from within your slack account. This will be the URL that is called from the Call URL action.
Once you have the Incoming WebHook URL from Slack, create the Call URL action and set it up like the image below, where the "URL to call" field is your Incoming WebHook.
The Custom POST option needs to be selected, with application/json as the encoding.
The format of the Parameters section is controlled by Slack. They have additional fields that can be used. We have shown some typical fields in the example above.
You can copy/paste from here:
{
"channel":"#test",
"username":"PA File Sight",
"text":"$Date$ $Time$\nComputer: [$Machine$]\nMonitor: [$MonitorTitle$]\nDescription: $Details['"',' '][80]$\n\n$MonitorMsg$\n$TimeInError$\n\n$SentFrom$",
"icon_emoji":":ghost:"
}
"channel":"#test",
"username":"PA File Sight",
"text":"$Date$ $Time$\nComputer: [$Machine$]\nMonitor: [$MonitorTitle$]\nDescription: $Details['"',' '][80]$\n\n$MonitorMsg$\n$TimeInError$\n\n$SentFrom$",
"icon_emoji":":ghost:"
}
In the fields, you can use the standard replacement variables that are enclosed in $ such as $Details$ which will contain the body of the alert. Press the Variables button to see a full list of replacement variables. Note that in this example, any quote marks in the $Details$ variable are being turned into spaces, and the variable is being truncated to 80 characters.
One advanced user came up with this clever way of attaching a different icon based on the Status variable (thanks Jonathan!)
{
"channel":"#test",
"username":"PA File Sight",
"text":"$Date$ $Time$\nComputer: [$Machine$]\nMonitor: [$MonitorTitle$]\nDescription: $Details['"',' '][80]$\n\n$MonitorMsg$\n$TimeInError$\n\n$SentFrom$",
"icon_emoji":":$Status["msOK","white_check_mark"]["msALERT_RED","no_entry"]["msALERT","warning"]$:"
}
"channel":"#test",
"username":"PA File Sight",
"text":"$Date$ $Time$\nComputer: [$Machine$]\nMonitor: [$MonitorTitle$]\nDescription: $Details['"',' '][80]$\n\n$MonitorMsg$\n$TimeInError$\n\n$SentFrom$",
"icon_emoji":":$Status["msOK","white_check_mark"]["msALERT_RED","no_entry"]["msALERT","warning"]$:"
}