Skip to main content

Slack Notifications

Anzenna delivers notifications to Slack channels using incoming webhooks. When a detection finds new events or an investigation is updated, a formatted message is posted to your chosen channel.

Setup​

1. Create a Slack Incoming Webhook​

  1. Go to

    api.slack.com/apps

    and create a new app (or use an existing one)

  2. Navigate to Incoming Webhooks and toggle it on

  3. Click Add New Webhook to Workspace and select the channel where you want notifications to appear

  4. Copy the webhook URL — it looks like

    https://hooks.slack.com/services/T.../B.../...

2. Add the Webhook to Anzenna​

  1. In Anzenna, navigate to Settings > Integrations

  2. Add a new Slack webhook integration and paste the webhook URL

3. Enable Slack for Notifications​

  1. Navigate to Settings > Notifications

  2. Toggle Webhook to enable webhook notifications

  3. Select the Slack webhook provider from the list

Webhook notification settings with Slack enabled
tip

Webhooks always fire immediately, even when the frequency mode is set to Batch. This ensures your Slack channel gets real-time alerts.

What Gets Posted​

When a notification fires, Anzenna posts a message to your Slack channel with:

  • Detection alerts — the detection name, new event count, affected users, and a direct link to the detection in Anzenna

  • Investigation alerts — the investigation headline, status, and a direct link to the investigation report

Per-Source Overrides​

You can enable or disable Slack notifications for individual detections or investigations using

per-source overrides

. This lets you send high-priority detections to Slack while keeping lower-priority ones email-only.

Need help? Contact

Anzenna Support

for assistance.