Slack Integration Overview
The Threat Stack and Slack integration aims to streamline the security and Ops team workflows. This enables your teams to quickly respond to issues and continuously improve your security posture.
You can implement the Slack integration using their webhook API.
Slack WebHook Setup
Before you can integrate Slack with Threat Stack, you need to create a custom WebHook url within Slack. Additionally, we recommend that you create a dedicated channel for alert notifications.
Navigate the to the Incoming WebHooks App page in the Slack App Directory.
1) Select the Add Configuration button to open the Incoming WebHook page.
2) In the Post to Channel section, select the channel from the dropdown menu.
3) Click the Add Incoming WebHooks Integreation button to create the integration and display the custom integration options.
4) Copy the Webhook URL, you will paste that into Threat Stack later.
Optionally, you can modify other integration settings but those modifcations are unnecessary to completing your integration with Threat Stack.
Integrate into Threat Stack
To integrate Slack with Threat Stack, provide Threat Stack with the Slack WebHook URL.
1) In the Threat Stack application, navigate to the Settings page, and locate the Slack Integration section.
2) Enter the integration name and description into the Name and Description fields.
3) Paste the Slack WebHook URL from Slack into the Web Hook URL field.
4) Set the Alert Severity, this dictates the level of alert severity that you want Slack to display.
5) Click the Save button to save your settings.
Congratulations, you have added a custom Threat Stack integration into a Slack channel. If you navigate to the Slack channel you should see an automated integration message confirmation. We advise that you intentionally set off an alert to test the integration.