Connect Webex Teams to Elastic Security

Both apps 28Webex Teams 18Elastic Security 10

• Trigger
  New membership

  Triggers when a person is added to a Webex space.

• Trigger
  New message

  Triggers when a new message is posted in a Webex space you are in.

• Action
  Add membership

  Adds a person to a Webex space (room) by person ID or email, optionally as a moderator, and returns the new membership.

• Action
  Add message

  Posts a message to a Webex space, or sends a direct message to a person, with optional text, markdown, a file or an adaptive card.

• Action
  Add room

  Creates a new Webex space (room), optionally inside a team.

• Action
  Add team

  Creates a new team in Webex. The person creating it becomes the team's moderator.

• Action
  Delete membership

  Removes a person from a Webex space by deleting their membership.

• Action
  Delete message

  Deletes a message from a Webex space.

• Action
  Delete room

  Deletes a Webex space (room) by its ID, along with its messages.

• Action
  Find people by email or name

  Finds Webex people by email address or display name and returns the matching people.

• Action
  Get message

  Returns the details of a single Webex message, including its text, room and sender.

• Action
  Get person

  Returns the details of a Webex person, such as their name, email addresses, avatar and status.

• Action
  Get room

  Returns the details of a Webex space, such as its title, type, team and creation date.

• Action
  List memberships

  Returns the memberships of a Webex space, or the spaces a person belongs to.

• Action
  List messages

  Returns the messages in a Webex space, newest first, optionally limited to replies in a thread, messages mentioning someone, or messages before a given time or message.

• Action
  List rooms

  Returns the Webex spaces (rooms) the authenticated user belongs to, optionally filtered by team or space type and sorted.

• Action
  Update message

  Edits the text of a message you previously posted in a Webex space.

• Action
  Update room

  Updates a Webex space's title and settings, such as locking it, making it public, or setting it to announcement-only.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.