Search Tokens for Slack (Response Templates) in Context XDR

You can use the search tokens available in Slack tab and refine your search results. Click each token to learn more about it.

Slack

createdBycreatedBy

Use a text value #####to Search the results by the user who created the template.

Example

Show the results of users are created the template

createdBy: dashb_du

createdOncreatedOn

Use a date range or specific date to define a date on which the template was created.

Examples

Show template created within certain dates

createdOn: [2016-01-01 .. 2016-01-10]

Show template created starting 2015-10-01, ending 1 month ago

createdOn:[2015-10-01 .. now-1M]

Show template created starting 2 weeks ago, ending 1 second ago

createdOn:[now-2w .. now-1s]

Show template created on specific date

createdOn:'2020-10-21 03:18 PM'

notificationNamenotificationName

Use a text value ##### to search all results according to the name given to the template, which will be used to search for the templates while creating rules.

Example

Show all results based on the templates to search while creating the rules

notificationName: HIGH_ALERT_SLACK_MESSAGE

notificationTypenotificationType

Use a text value ##### to search all results based on to the type of notification. Select value from: EMAIL, SLACK, PAGER.

Example

Show all results with notification type EMAIL

notificationType: EMAIL

slackChannelNameslackChannelName

Use a text value ##### to search all results according to the slack channel name where the notification should be sent.

Example

Show all results based on the slack channel name where the notification should be sent

slackChannelName: "#SecurityNotifications"

slackMessageslackMessage

Use a text value ##### to search all results based on the message that would be sent on the channel.

Example

Show all results based on the message that would be sent on the channel

slackMessage: Please check for the alerts

slackUserNameslackUserName

Use a text value ##### to search all results based on the username to be used to connect to slack.

Example

Show all results based on the username to be used to connect to slack

slackUserName: dashb_du

slackWebHookUrlslackWebHookUrl

Use a text value ##### to search all results based on the web hook url to be used to connect to slack service.

Example

Show all results based on the web hook url to be used to connect to slack service

slackWebHookUrl: https://hooks.slack.com/services/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

idid

Use an integer value ##### to search all results based on the id of the current slack template.

Example

Show all results based on the id of the current slack template

id: 01

customerIdcustomerId

Use an integer value ##### to search all results based on the id of the customer.

Example

Show all results based on the customer id

customerId: 01

updatedByupdatedBy

Use a text value ##### to search results based on the user who updated the template.

Example

Show all results based on the user who updated the template

updatedBy: dashb_du

updatedOnupdatedOn

Use a date range or specific date to define date on which the template was updated.

Examples

Show template updated within certain dates

updatedOn: [2016-01-01 .. 2016-01-10]

Show template updated starting 2015-10-01, ending 1 month ago

updatedOn: [2015-10-01 .. now-1M]

Show template updated starting 2 weeks ago, ending 1 second ago

updatedOn: [now-2w .. now-1s]

Show template updated on specific date

updatedOn:'2016-01-08'