Expel security monitoring tracks many moving parts at the same time. Many events, like a security device going offline or an investigation being opened, trigger an immediate notification. Your organization can use multiple notification systems to send and receive messages about your environment. These include email, a ticketing system, Slack, Microsoft Teams, and others. Learn more about the types of notifications below.

    • Email Notifications are configured at the user level and are sent directly to an email address specified in Workbench.
    • Organization Notifications are configured at the organization level in Workbench and sent via a communications tool your organization integrates with Workbench (Slack, Microsoft Teams, etc).

Communication channel

Get notifications

Respond to notifications

Notes

Email

AYesIcon.png
 

Email Notifications include a link to take an action in Workbench.

Use your Expel Slack channel if you have one, or contact Expel Support if you need to talk to us about a Ruxie notification.

Slack

AYesIcon.png
AYesIcon.png
 

Ticketing System

AYesIcon.png
 

ServiceNow may create an event in Workbench for SOC analysts if you respond to a ticketing notification we create.

For other ticketing systems or if you're not sure your ServiceNow is set up to respond, use your Expel Slack channel if you have one, or contact Expel Support if you need to talk to us about a Ruxie notification.

OpsGenie

AYesIcon.png
 

Use your Expel Slack channel if you have one, or contact Expel Support if you need to talk to us about a Ruxie notification.

PagerDuty

AYesIcon.png
 

Use your Expel Slack channel if you have one, or contact Expel Support if you need to talk to us about a Ruxie notification.

Microsoft Teams

AYesIcon.png
 

Use the Microsoft Teams channel that was set up when you started with Expel.

Contact Expel Support if you need to talk to us about a Ruxie notification.

See also: