Expel security monitoring tracks many moving parts at the same time. Many events, like a security device going offline or an Investigation being opened, trigger a notification from Workbench. You may also receive a notification if there is a manual action of some kind that you need to take in support of an Investigative Action.
Quick Links
Notification Types
There are two types of notifications that can be set up in Workbench:
- An email notification is configured at the user level and sent to an individual email address. Email notifications include a link to take action in Workbench.
- An organization notification is configured at the organization level and sent to a communications platform like Slack® or Microsoft Teams™, or to other integrations like a ticketing system or webhook destination.
Your organization can use more than one type of notification to receive messages about your environment, if you choose. You can also leverage email, or integrations with Slack or Microsoft Teams, to communicate back to Expel.
Available Integrations
All of the following integrations are configured at the organization level. Options include:
How to Set Up Notifications
All notifications are set up in Workbench in Settings > Organization Settings. The difference is that email notifications are set up in the Users section, and organization notifications are set up in the My Organizations section.
- When you set up email notifications, you simply select a notification event and then specify an email.
- When you set up organization notifications, you must first use the Integrations tab to set up the initial integration, and then use the Notifications tab to create the individual notifications that are routed to that integration.
Workbench can also help you add a default set of notifications that cover the most common scenarios, if you choose.
For more detailed help or more information, use the following links: