Skip to main content

 

 

Cisco Defense Orchestrator

Enable Service Integrations for CDO Notifications

Enable service integration to forward CDO notifications through a specified messaging application or service. You need to generate a webhook URL from your messaging application and point CDO to that webhook in CDO's Notification Settings page to receive notifications.

CDO natively supports Cisco Webex and Slack as service integrations. Messages sent to these services are specially formatted for channels and automated bots.

Note: The notifications selected in the Notification Settings page are the events forwarded to your messaging application. 

Incoming Webhooks for Webex Teams

CDO notifications appear in a designated workspace or as an automated bot in a private message. For more information on how Webex Teams handles webhooks, see Webex for Developers for more information.

Use the following procedure to allow incoming webhooks for Webex Teams:

  1. Open the Webex Teams application. 
  2. In the lower left corner of the window, click the Apps icon. This action opens the Cisco Webex App Hub in new tab in your preferred browser.
  3. Use the search bar to find Incoming Webhooks
  4. Select Connect. This action opens an OAuth Authorization to allow the application in a new tab.  
  5. Select Accept. The tab automatically redirects to the application's configuration page. 
  6. Configure the following:
  • Webhook name - Provide a name to identify the messages provided by this application. 
  • Select a space - Use the drop-down menu to choose a Space. The Space must already exist in Webex team. If a space does not exist, you can create a new space in Webex Teams and refresh the application's configuration page to display the new space. 
  1. Select Add. The Webex Space you chose will receive a notification that the application is added. 
  2. Copy the Webhook URL. 
  3. Log into CDO. 
  4. Open the User Menu in the upper right corner and select Settings
  5. Select the Notifications Settings tab on the left.
  6. Scroll to Service Notifications
  7. Click the blue plus button cli_create_plus.png.
  8. Enter a Name. This name appears in CDO as a configured service integration. It does not appear in any events forwarded to the configured service. 
  9. Expand the drop-down menu and select Webex as the Service Type. 
  10. Paste the webhook URL that you generated from the Cisco Webex app hub. 
  11. Click OK.

Incoming Webhooks for Slack

CDO notifications appear in a designated channel or as an automated bot in a private message. For more information on how Slack handles incoming webhooks, see Slack documentation(https://api.slack.com/tutorials/slack-apps-hello-world). 

Use the following procedure to allow incoming webhooks for Slack:

  1. Log into your Slack account. 
  2. In the panel to the left, scroll to the bottom and select Add Apps
  3. Search application directory for Incoming Webhooks and locate the app. Select Add
  4. If you are not the admin of your Slack workspace, you must send a request to the admin of your org and wait for the app to be added to your account. Select Request Configuration. Enter an optional message and select Submit Request.
  5. Once the Incoming Webhooks app is enabled for your workspace, refresh the Slack settings page and select Add New Webhook to Workspace.

Note: If you navigate away from this page while waiting for the request to get enabled, simply log into Slack and select the workspace name in the upper left corner. From the drop-down menu, select Customize Workspace and select Configure Apps. Navigate to Manage > Custom Integrations. Select Incoming Webhooks to open app's landing page and then select Configuration from the tabs. This lists all the users within your workspace that has this app enabled. You can only see and edit your account's configuration. Select your workspace name to edit the configuration and move forward. 

  1. ​​​​​Use the drop-down menu to select the Slack channel you want the CDO notifications to appear in. Select Authorize
  2. The Slack settings page redirects you to the configuration page for the app. Locate and copy the webhook URL. 
  3. Log into CDO. 
  4. Open the User Menu in the upper right corner and select Settings
  5. Select the Notifications Settings tab on the left.
  6. Scroll to Service Notifications
  7. Click the blue plus button cli_create_plus.png.
  8. Enter a Name. This name appears in CDO as a configured service integration. It does not appear in any events forwarded to the configured service. 
  9. Expand the drop-down menu and select Slack as the Service Type. 
  10. Paste the webhook URL that you generated from the Slack application directory. 
  11. Click OK.

Incoming Webhooks for a Custom Integration

CDO does not format messages for custom integration. If you opt to integrate a custom service or application, CDO sends a JSON message. 

Refer to the service's documentation on how to enable incoming webhooks and generate a webhook URL. Once you have a webhook URL, use the procedure below to enable webhooks:

  1. Generate and copy the webhook URL from the custom service or application of your choice. 
  2. Log into CDO. 
  3. Open the User Menu in the upper right corner and select Settings
  4. Select the Notifications Settings tab on the left.
  5. Scroll to Service Notifications
  6. Click the blue plus button cli_create_plus.png.
  7. Enter a Name. This name appears in CDO as a configured service integration. It does not appear in any events forwarded to the configured service. 
  8. Expand the drop-down menu and select the Service Type
  9. Paste the webhook URL that you generated from the service. 
  10. Click OK.

Edit a Service Integration

You can modify an existing webhook configuration for a service integration at any time. Use the procedure below to edit a service integration:

  1. Log into CDO. 
  2. Open the User Menu in the upper right corner and select Settings
  3. Select the Notifications Settings tab on the left.
  4. Scroll to Service Notifications.
  5. Identify the service integration you want to edit and click the Edit button. 
  6. Edit the service integration information. 
  7. Click Save. Changes are applied immediately. 

Remove for a Service Integration

If at any point you need to discontinue notifications to a specific service or application, you can remove one or multiple configured instances. Use the procedure below to remove a service integration:

  1. Log into CDO. 
  2. Open the User Menu in the upper right corner and select Settings
  3. Select the Notifications Settings tab on the left.
  4. Scroll to Service Notifications
  5. Identify the service integration you want to remove. 
  6. Click the Delete button. The instance is removed from the table and CDO immediately stops sending notifications to the integration. 
  • Was this article helpful?