Expel security monitoring tracks many moving parts at the same time. Many events, like a security device going offline or an Investigation being opened, trigger a notification from Workbench. You may also receive a notification if there is a manual action of some kind that you need to take in support of an Investigative Action.
Quick Links
Notification Types
There are two types of notifications that can be set up in Workbench:
- An email notification is configured at the user level and sent to an individual email address. Email notifications include a link to take action in Workbench.
- An organization notification is configured at the organization level and sent to a communications platform like Slack® or Microsoft Teams™, or to other integrations like a ticketing system or webhook destination.
Your organization can use more than one type of notification to receive messages about your environment, if you choose. You can also leverage email, or integrations with Slack or Microsoft Teams, to communicate back to Expel.
Default Workbench Notifications
Certain notifications are enabled by default for organizations and users. For more information, see Default Workbench Notifications.
How to Set Up Notifications
All notifications are set up in Workbench in Settings > Organization Settings. The difference is that email notifications are set up in the Users section, and organization notifications are set up in the My Organizations section.
- When you set up email notifications, you simply select a notification event that will be sent to the user email.
- When you set up organization notifications, you must first use the Integrations tab to set up the initial integration, and then use the Notifications tab to create the individual notifications that are routed to that integration.
For full setup instructions, use one of the following links:
Available Integrations
All of the following integrations are configured at the organization level. Options include:
You should configure these integrations using the respective setup guides, and then you can set up your organization notifications.