Connect Bento to Elastic Security

Both apps 34Bento 24Elastic Security 10

• Trigger
  New Tag

  Triggers when a new tag is created on your Bento site.

• Action
  Add broadcast

  Creates a broadcast email draft in Bento, optionally scheduled and approved for sending to tagged or segmented subscribers.

• Action
  Create Field

  Creates a custom subscriber field on your Bento site.

• Action
  Create or Update User

  Creates a Bento subscriber, or updates the name of an existing one, by email address.

• Action
  Create or Update User and Apply Tag

  Creates or updates a Bento subscriber by email and applies one or more tags, without triggering Flows.

• Action
  Create or Update User and Apply Tag (Trigger Flows)

  Applies a tag to a Bento subscriber (creating them if needed) through an event, so any Flows listening for that tag start.

• Action
  Create Tag

  Creates a tag on your Bento site.

• Action
  Delete tag

  Discards a tag in Bento by name (running it on an already-discarded tag restores it).

• Action
  Fetch Site Metrics

  Returns your Bento site's user, subscriber and unsubscriber counts.

• Action
  Fetch Subscriber

  Returns a Bento subscriber's details, tags and custom fields by email address.

• Action
  Get email template

  Returns one email template, including its name, subject and HTML content.

• Action
  Get segment

  Returns one segment, including its name, description and filter definition.

• Action
  Import subscribers

  Queues up to 1,000 subscribers for import or update in Bento. Imports do not trigger automations.

• Action
  List Broadcasts

  Returns one page of Bento broadcasts with the chosen status, including their send stats.

• Action
  List Fields

  Returns every custom subscriber field on your Bento site.

• Action
  List segments

  Returns all segments in your Bento site.

• Action
  List sequences

  Returns the sequences on your Bento site, including each sequence's email templates.

• Action
  List Tags

  Returns every tag on your Bento site.

• Action
  List workflows

  Returns all workflows on the Bento site, with their name, status and email templates.

• Action
  Remove Tag from Subscriber

  Removes a tag from a Bento subscriber by email.

• Action
  Track Subscribe Event

  Subscribes or unsubscribes a Bento subscriber by email.

• Action
  Update email template

  Updates the subject, HTML content, or editor type of a Bento email template.

• Action
  Update Subscriber Field

  Sets one custom field value on a Bento subscriber.

• Action
  Validate Email

  Checks whether an email address looks valid and deliverable.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.