Connect Inistate to Elastic Security

Both apps 25Inistate 15Elastic Security 10

• Trigger
  Activity Performed

  Triggers when an activity is performed on an entry in the chosen module, detected as a change to the entry's last-updated time.

• Trigger
  Changed Information

  Triggers when an entry's information in an Inistate module is changed.

• Trigger
  Changed State

  Triggers when an entry in the selected Inistate module moves to a different workflow state.

• Trigger
  Information Due

  Triggers when an entry in the chosen module reaches its due date.

• Trigger
  New Entry

  Triggers when a new entry is created in the selected Inistate module.

• Trigger
  Updated Entry

  Triggers when an entry in the selected module is created or changed.

• Action
  Create Entry

  Creates a new entry in an Inistate module with the field values you supply.

• Action
  Delete Entry

  Deletes an entry from an Inistate module.

• Action
  Duplicate Entry

  Creates a copy of an existing entry in an Inistate module.

• Action
  Edit Entry

  Edits an existing entry in an Inistate module, updating the field values you supply.

• Action
  Get Activity Form

  Returns the fields an Inistate activity asks for (such as the create form, or the Reject form on an entry), with each field's id, name, type and options.

• Action
  List Entries

  Returns entries from an Inistate module, optionally narrowed to one of the module's listings.

• Action
  List Modules

  Returns the modules (record types such as Leave Request or Expense Claim) set up in an Inistate workspace.

• Action
  List Workspaces

  Returns the Inistate workspaces the connected user belongs to, with each workspace's id and name.

• Action
  Perform Activity

  Runs an activity (such as Submit, Approve or Reject) on an existing Inistate entry, moving it through its workflow.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.