Connect Cisco WebEx to Elastic Security

Both apps 22Cisco WebEx 12Elastic Security 10

• Trigger
  New meeting

  Fires when a meeting is created. Webhook resource=meetings event=created

• Trigger
  New message

  Fires when a message is created in a space.

• Action
  Add meeting

  Schedules a new Webex meeting (or webinar / personal room meeting) and returns the created meeting.

• Action
  Add message

  Posts a plain-text or Markdown message, optionally with one file or one card, to a Webex space or directly to a person.

• Action
  Add room

  Creates a Webex space (room). The connected user is automatically added as a member.

• Action
  Delete meeting

  Deletes a scheduled meeting or an entire meeting series. A deleted meeting cannot be recovered.

• Action
  Find people by criteria

  Returns up to 100 people in the Webex organization that match the specified email, name, IDs, roles or location.

• Action
  Get meeting

  Retrieves the details of a Webex meeting series, scheduled meeting or meeting instance by its id.

• Action
  Get membership

  Returns one space membership: who the member is, which space, and whether they moderate it.

• Action
  List messages

  Lists the messages in a Webex space, newest first. Optionally narrow to replies in one thread, messages mentioning you, or messages sent before a date or message.

• Action
  List rooms

  List the Webex spaces (rooms) the connected user belongs to, optionally filtered by team or type.

• Action
  Update meeting

  Updates a meeting series or a single scheduled meeting in Webex. Only the fields you fill in are changed.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.