Connect MySQL to Elastic Security

Both apps 20MySQL 10Elastic Security 10

• Trigger
  New or Updated Row

  Triggers when a new row is added or modified.

• Trigger
  New or Updated Row (Custom Query)

  Fires for each new or changed row returned by a SELECT statement you write against the connected MySQL database.

• Trigger
  New Row

  Triggers when you add a new row.

• Trigger
  New Table

  Fires when a new table appears in the connected MySQL database.

• Action
  Add Row

  Adds a new row.

• Action
  Delete Row

  Delete the rows in a table whose chosen column equals a value.

• Action
  Find Row

  Finds a row in a table via a lookup column.

• Action
  Find Rows via Custom Query

  Run an author-written SELECT against the connected MySQL database and return every row it produced. Mirrors PostgreSQL 715ae2ac, SQL Server 8e0bbb5d and Oracle 2c308e4d; MySQL placeholder style is ?.

• Action
  Find Row via Custom Query

  Runs a SELECT statement you write against the connected MySQL database and returns the first row it matches.

• Action
  Update Row

  Updates an existing row.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.