Although ChatOps isn’t new, the solution has continued to gain popularity over the past few years. Instead of the basic instant messaging tools that we’ve come to rely on, ChatOps has evolved into a collaboration tool that connects people, tools, processes and automation into a transparent workflow for teams. It’s no wonder new tools are popping up everyday, and it’s being extended into security orchestration and automation use cases.
With the Swimlane ChatOps integration, you can get easily a teammate’s attention to help with an incident. Using a Slack integration, there are several ways that ChatOps can be utilized. An analyst can create a message in Swimlane and then have it sent to Slack while tagging other users, a Slack notification can be sent everyone when any new incident is received, or if a custom defined set of criteria is met, Slack can alert a specified group to take action.
So let’s put this in action. Below a simple message was typed into Swimlane the same way it would be in Slack:
Then, a message gets posted to the #soc Slack channel with some details about the incident, a link to access the incident in Swimlane, and an analyst, Mike, got tagged in the message to alert him:
Although this was a simple example, there are many other ways to customize the use of the Swimlane Slack integration. For example, if you wanted to send an alert to the channel for every incident, or when certain criteria are met (like an incident is set to “High”), Swimlane can automatically tag @here in Slack to alert everyone within the channel that there is a high-priority incident, and so it can be worked on immediately.
If you are interested in seeing the Swimlane ChatOps integration in action, please request a demo.
The post Swimlane ChatOps via Slack Integration appeared first on Swimlane.