Connect Karbon to Elastic Security

Both apps 27Karbon 17Elastic Security 10

• Trigger
  New work item

  Triggers when a new work item is created in Karbon.

• Action
  Add client group

  Creates a new client group in Karbon, optionally with members, owner, manager and client team.

• Action
  Add note

  Creates a note in Karbon, optionally assigned to a user and linked to work items, contacts, organizations or client groups.

• Action
  Add work item

  Creates a new work item for a client in Karbon.

• Action
  Create Organization Contact

  Creates a new Organization contact in Karbon.

• Action
  Create Person Contact

  Creates a new person Contact in Karbon and returns the created Contact record.

• Action
  Find an Organization Contact

  Finds Organization contacts in Karbon matching a full name, email address, external key or contact type, and returns the matching organizations.

• Action
  Find a Person Contact

  Finds person contacts in Karbon by email address, full name, phone number, contact type or external key, and returns the matches.

• Action
  Get work item

  Returns the details of a single Karbon work item, including its client, dates, status, fee settings and role assignments.

• Action
  List invoices

  Returns the invoices in your Karbon account, optionally filtered by invoice status and sorted.

• Action
  List timesheets

  Returns a list of timesheets from your Karbon account, optionally filtered by date, user, work item or status, with their time entries if requested.

• Action
  List users

  Returns the users in your Karbon account, optionally filtered by name or email address.

• Action
  List work items

  Returns the work items in your Karbon account, optionally filtered and sorted.

• Action
  Update client group

  Renames an existing Karbon client group by changing its full name.

• Action
  Update Organization Contact

  Updates the name or privacy level of an existing Organization contact in Karbon.

• Action
  Update Person Contact

  Updates the name details or privacy level of an existing Person Contact in Karbon.

• Action
  Update work item

  Updates a Karbon work item's title, description, dates, assignee, work type, role assignments or status. Fields left blank are not changed.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.