Connect Personio to Elastic Security

Both apps 37Personio 27Elastic Security 10

• Trigger
  Employee Updated

  Triggers when an employee is updated.

• Trigger
  Employment Updated

  Triggers when one or more Employment details of a Person are updated

• Trigger
  New Absence

  Triggers when a new absence is created.

• Trigger
  New Candidate

  Fires when a new recruiting candidate is added in Personio.

• Trigger
  New Employee

  Triggers when a new employee is created.

• Trigger
  New Employment Created

  Triggers when one or more Employment details of a Person are created

• Trigger
  New Open Position

  Triggers when a new open position is created.

• Action
  Add project

  /v2/projects - create a project.

• Action
  Create Absence

  Creates a new absence.

• Action
  Create Attendance

  Creates a new attendance.

• Action
  Create Employee

  Creates a new employee.

• Action
  Delete absence

  /v2/absence-periods/{id} - delete an absence period.

• Action
  Delete attendance

  /v2/attendance-periods/{id} - delete an attendance period.

• Action
  Delete person

  /v2/persons/{id} - delete a person.

• Action
  Find Absence

  Finds an absence by employee ID.

• Action
  Find Employee

  Finds a employee based on email.

• Action
  Find Person

  Finds a person by their Personio ID, name, last name and email, optionally including their absence information.

• Action
  Get Employment

  Retrieves one employment of a person by id: position, status, type, working hours, org units, cost centers, supervisor, office, legal entity, dates.

• Action
  List absence types

  /v2/absence-types - list absence types.

• Action
  List Compensations

  Lists compensations filtered by person.id and a start_date/end_date window; returns id, amount, interval, type, effective_from per record.

• Action
  List legal entities

  /v2/legal-entities - list legal entities.

• Action
  List org units

  /v2/org-units - list org units.

• Action
  List projects

  /v2/projects - list projects.

• Action
  Update absence

  /v2/absence-periods/{id} - update an absence period.

• Action
  Update Attendance

  Updates an existing attendance.

• Action
  Update Employee

  Updates an existing employee.

• Action
  Update Employment

  updates an employment (position, department, office, weekly hours, status, etc.); requires personio:persons:write. Fires the employment.updated webhook.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.