Connect Airparser to Elastic Security

Both apps 20Airparser 10Elastic Security 10

• Trigger
  Document Parsed

  Triggers when Airparser finishes parsing a document in the chosen inbox, giving you the extracted data.

• Action
  Create an Inbox

  Creates a new Airparser inbox that documents can be sent to for parsing.

• Action
  Create or Update Extraction Schema

  Sets which fields Airparser should pull out of documents sent to an inbox, replacing whatever schema was there before.

• Action
  Delete an Inbox

  Deletes an Airparser inbox and the documents stored in it.

• Action
  Extract Data From a Document

  Sends a document to an Airparser inbox, waits for it to be parsed, and returns the extracted data.

• Action
  Extract Data From a Document (Async)

  Sends a document to an Airparser inbox and returns straight away without waiting for parsing. Use the Document Parsed trigger or Get Document to pick up the result.

• Action
  Get a Document

  Returns a parsed Airparser document, including the data extracted from it.

• Action
  Get an Inbox

  Returns one Airparser inbox with its settings, its email address prefix and its current extraction schema.

• Action
  List Documents

  Lists the documents in an Airparser inbox, with the data extracted from each one.

• Action
  List Inboxes

  Lists all the Airparser inboxes in the connected account.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.