Connect Sally to Elastic Security

Both apps 28Sally 18Elastic Security 10

• Trigger
  New Recording

  Triggers when a new recording appears in a Sally directory.

• Trigger
  New Summary for Appointment Created

  Triggers when Sally finishes a new meeting summary.

• Trigger
  New Task

  Triggers when a new task is created in a Sally directory.

• Action
  Create Recording from URL

  Creates a Sally recording from an audio or video file URL and starts transcription.

• Action
  Create Tag

  Creates a tag in the Sally tag catalog (admins and owners only).

• Action
  Create Task

  Creates a task in Sally.

• Action
  Create Vocabulary Entry

  Adds a vocabulary phrase that improves Sally transcription.

• Action
  Delete Task

  Deletes a Sally task.

• Action
  Find Summaries

  Searches Sally recording summaries by words in their content.

• Action
  Find Tasks

  Searches Sally tasks by text.

• Action
  Get Recording

  Returns one Sally recording by id.

• Action
  Get Recording Transcript

  Returns the transcript of a Sally recording with its time-coded segments and speakers.

• Action
  Get Summary

  Returns one Sally recording summary with its sections.

• Action
  Get Task

  Returns one Sally task by id.

• Action
  List Directories

  Returns the Sally company accounts (directories) your token can access.

• Action
  List Recording Summaries

  Returns the AI summaries of a Sally recording, one per language.

• Action
  Toggle Task Done

  Marks a Sally task done, or reopens it.

• Action
  Update Task

  Updates the fields you supply on a Sally task.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.