Connect Poptin to Elastic Security

Both apps 43Poptin 33Elastic Security 10

• Trigger
  New Contact

  Triggers when a new contact is added to your Poptin contact list.

• Trigger
  New Lead

  Triggers when a visitor submits a Poptin form, creating a new lead (conversion).

• Action
  Campaign Analytics

  See how your email campaigns performed overall in a date range (sends, opens, clicks, bounces) - the same metrics as a single campaign, rolled up.

• Action
  Create preference

  Add a new subscription preference topic (name and optional description) that contacts can be opted into. **423** if the account is locked for processing.

• Action
  Delete campaign

  Permanently delete a campaign you no longer need. Campaigns that are `sending` or `queued` cannot be deleted (**422**). Allowed while under review. Returns **204** with no body.

• Action
  Delete contact

  Permanently remove one contact by public id (`uid`). For many deletions, prefer **Bulk delete contacts (JSON)**. Returns **204** with no body. **423** if the account is locked for processing.

• Action
  Delete conversion

  Remove lead personal details from a conversion while the row may be kept for aggregate stats. Returns **204**. **423** if the account is locked for processing.

• Action
  Delete poptin

  Soft-delete a popup/form (recoverable by support for a limited time). A/B versions are reassigned as in the dashboard. Returns **204**. **423** if the account is locked for processing.

• Action
  Delete preference

  Remove a subscription preference topic you no longer offer. Contacts lose this preference association. **423** if the account is locked for processing.

• Action
  Delete property

  Remove a custom property you no longer need. Built-in/default properties cannot be deleted (**406**). **423** if the account is locked for processing.

• Action
  End campaign

  Mark a `paused` campaign as `completed` so it will not continue sending - use this to close out a send early. Ending an already `completed` campaign is a no-op (**200**). **422** for other statuses or when the campaign is under review.

• Action
  List campaigns

  Browse email campaigns on your account (with optional name/status filters) so you can find a campaign to inspect or control. Paginated (`per_page` default **10**, max **100**).

• Action
  List contacts

  Browse and search people on your contact list so you can sync a CRM, audit who is subscribed, or find a contact before updating them.

• Action
  List conversions

  Browse leads and actions captured from your popups/forms so you can sync them to another system or review recent activity.

• Action
  List poptins

  Browse your popups and forms with per-Poptin aggregate metrics so you can rank performers or find a Poptin to inspect.

• Action
  List preferences

  List subscription preference topics on your account so you can build a preference center or map topic ids when syncing contacts. Paginated (`per_page` default **50**, max **100**).

• Action
  List properties

  List the contact fields available on your account so you can map forms or syncs to the right keys. Paginated (`per_page` default **50**, max **100**).

• Action
  Pause campaign

  Temporarily stop a campaign that is currently `sending` or `queued` - for example while you fix content or list issues. Pausing an already `paused` campaign is a no-op (**200**). **422** for other statuses or when the campaign is under review.

• Action
  Pause poptin

  Turn off an active popup/form so it stops showing on your site. Pausing an already `inactive` poptin is a no-op (**200**). **422** for statuses that cannot be paused (for example `draft`).

• Action
  Poptin Analytics

  See account-wide popup and form results for a time period - visitors, views, conversions, growth, and rates - the same overview style numbers you would check in the dashboard.

• Action
  Refresh poptin stats

  Ask Poptin to recompute popup/form aggregate stats when the cached overview looks stale.

• Action
  Rename poptin

  Change the display name of a popup/form. Name must be 2–256 characters and unique on the account (**422** if taken).

• Action
  Resume campaign

  Continue a `paused` campaign, or retry one that entered an `error` state. Resuming an already `sending`, `queued`, or `scheduled` campaign is a no-op (**200**), except when under review (**422**). **422** for other statuses or when the campaign is under review.

• Action
  Resume poptin

  Turn an inactive popup/form back on. Resuming an already `active` poptin is a no-op (**200**). **422** for statuses that cannot be resumed (for example `draft`).

• Action
  Show bulk job status

  Poll a background bulk job until `status` is `done` or `failed`. Requires `object_id` and `object_name` from the **202** response of a queuing operation.

• Action
  Show campaign

  Get one campaign by public id (`uid`), including its delivery status and performance statistics (sends, opens, clicks, bounces, and rates). A/B campaigns also include `ab`, `ab_test_percentage`, and per-variant details (`type`, `has_body`, headers). During an active A/B test, top-level `subject` / `

• Action
  Show contact

  Get one contact by public id (`uid`), including field values, tags, preferences, and subscription status - useful before an update or to verify a sync.

• Action
  Show conversion

  Get one conversion by public id (`uid`) - for example to fetch full lead details after a webhook or list sync. Pass `include=extra_fields` to resolve submitted input fields.

• Action
  Show poptin

  Get one popup or form by public id (`uid`) with its aggregate metrics. A/B parents include nested versions; A/B versions include the parent’s identity and metrics.

• Action
  Show preference

  Get one preference topic by public id (`uid`). Pass `include=contacts_count` when you need how many contacts currently have this preference.

• Action
  Show property

  Get one contact property, including its type and options, so you can map forms or syncs to the right field.

• Action
  Update contact status

  Change only a contact’s subscription status (for example subscribe, unsubscribe, or mark as bounced) without rewriting their other fields.

• Action
  Update preference

  Update a preference topic without changing which contacts are opted in. **423** if the account is locked for processing.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.