Cisco Webex Teams

You can configure a Lacework alert channel to forward alerts to a Webex Teams space as an incoming webhook.

Create an Incoming Webhook

To create an incoming webhook, go to Cisco Webex App Hub, enter Incoming Webhooks, log in to your account. and complete the following steps:

1. Click Connect.
2. Name your webhook.
3. Select a space where you want to receive events – you can use an existing space or create a dedicated Lacework space depending on your current workflow.

Create a Lacework Alert Channel

After you set up your Cisco Spark incoming webhook, return to the Lacework Console and complete the following steps:

1. Log in to the Lacework Console with a Lacework user that has administrative privileges.
2. Navigate to Settings > Alert Routing > Alert Channels.
3. Click + Create New.
4. Select Cisco Webex Teams.
5. Name the integration.
6. Add the URL of your incoming webhook.
7. Click Save.
8. Click Alert Rules and configure your required alert routing details/options by leveraging the alert channel you created.

You should now start to receive Lacework event notifications in your chosen Webex Teams space.

Create a Lacework Cisco Webex Teams Alert Channel Using Terraform

For organizations using Terraform to manage their environments, Lacework maintains the Terraform Provider for Lacework which enables configuration of Lacework Alert Channels using automation.

If you are new to the Lacework Terraform Provider, or Lacework Terraform Modules, read the Terraform for Lacework Overview to learn the basics on how to configure the provider, and more.

For a complete list of custom Terraform resources to manage alert channels in Lacework, see Managing Alert Channels with Terraform.

# Configure Cisco Webex Alert Channel in Lacework
resource "lacework_alert_channel_cisco_webex" "example" {
  name      = "My Cisco Webex Channel Alert Example"
  webhook_url = "https://webexapis.com/v1/webhooks/incoming/api-token"
}

Additional information on the lacework_alert_channel_cisco_webex resource can be found on the Terraform Registry.