Connect Geekbot to Elastic Security

Both apps 28Geekbot 18Elastic Security 10

• Trigger
  New Report

  Triggers when a new standup report is submitted in Geekbot.

• Action
  Add out-of-office period

  Schedules an out-of-office period for you or, if you are an admin, for another team member, covering whole days from the start date to the end date.

• Action
  Add poll

  Creates a one-shot Geekbot poll that posts a question with answer choices to a channel.

• Action
  Add standup

  Creates a new Geekbot standup with its questions, schedule and broadcast channel.

• Action
  Delete report

  Deletes a standup report you authored, removing its broadcast message if one was posted.

• Action
  Delete standup

  Deletes a standup and returns the details of the standup that was removed. You must have permission to edit the standup.

• Action
  Get current user

  Returns the user who owns the connected API key, along with the team they belong to.

• Action
  Get poll

  Returns one poll you created, including its schedule, channel, members and optionally its questions.

• Action
  Get report

  Returns one submitted standup report, including who posted it, when, and the answer to each question.

• Action
  Get standup

  Returns one standup by id, including its schedule, members, broadcast settings and optionally its questions.

• Action
  List out-of-office periods

  Returns out-of-office periods for the team members you can view, ordered by start date, optionally narrowed by users, standups or a date window.

• Action
  List polls

  Returns the active and paused polls you created in Geekbot, optionally filtered by state, channel, anonymity or creation date.

• Action
  List poll votes

  Returns the vote results for a poll, grouped by broadcast and question. Without a date range it covers only the latest broadcast.

• Action
  List reports

  Returns submitted Geekbot standup reports within a time window, optionally filtered by standup or user.

• Action
  List standups

  Returns the active and paused standups visible to the connected user, with optional filters for state, anonymity, channel and creation date.

• Action
  List teams

  Returns the Geekbot team tied to the connected API key, including its users who take part in at least one standup visible to the connected user.

• Action
  Start Report

  Starts a standup immediately so its report questions go out, either to all of its participants or only to the users or emails you name. Returns the vendor's confirmation that the standup was queued.

• Action
  Update standup

  Updates a standup's name, schedule, questions, channel and participants. Returns the updated standup.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.