Once configured, every alert generated by IDS is sent in real time to the selected channel, allowing your team to monitor threats, react quickly, and maintain full visibility on network activity.
The goal is not to flood a channel, because too many notifications will quickly discourage your team from using it.
This is why you must explicitly choose which rules will trigger a notification to the Mattermost channel.
You can target an entire family, a specific category, or even an individual rule.
- The first step is to configure general setting for your mattermost server.
- To create a robot API and a channel, refers to this page
- On the IDS dasboard, click on Traffic Logging and select Mattermost tab
- Turn to ON the “Enable” checkbox
- Set the URL to your Mattermost server
- Enable the “Use Proxy server” If Artica must use the defined proxy service in Internet access section to communicate with your Mattermost server
- Set the Channel ID
- Add the token created after added the Bot account
- +