Slack Webhooks

Send Keeper advanced reporting and alert notifications to Slack

Slack Setup and Integration

Using the Webhook feature, you can send custom alerts and actions to your Slack channel following the steps below.

Example Slack Notification

(1) Go to https://api.slack.com/apps and Create a new app

Create New App

(2) Name the App, select your desired Workspace and click Create App.

Create App

(3) Click on Incoming Webhooks

(4) Activate the Webhook and click "Add New Webhook to Workspace.

Activate Webhook

(5) Select the Slack channel you would like the alerts to be sent. Then click "Copy" to grab the Webhook URL required to plug into the Admin Console interface in the following steps.

Copy the Webhook URL

(6) In the "Basic Information" section on the left, you can populate the icon with the Keeper icon. Right-click and save the image Use the link below to download a 512x512 PNG icon for Keeper: https://keeper-email-images.s3.amazonaws.com/common/Keeper_512x512.png

(7) Login to the Keeper Admin Console and visit Reporting & Alerts > Alerts and create a new alert. After selecting the desired Event Types and Attributes, click on "Add Recipient". In the example below, I have selected all Policy Changes.

Add Alert

Select Event Types and Attributes

Add Recipient (Slack)

(8) Enter the Name and Email address to receive the event, and click Add Webhook.

Add Webhook

(9) Paste the Webhook URL from Step 5 and copy and paste the HTTP body content below

(10) Copy-paste the below JSON content into the HTTP Body section.

{
  "text": "Keeper Security Event",
  "blocks": [
    {
      "type": "section",
      "fields": [
        {
          "type": "mrkdwn",
          "text": "*Alert Name*\n#alert_name"
        }
      ]
    },
    {
      "type": "section",
      "fields": [
        {
          "type": "mrkdwn",
          "text": "*Event Details*\n#description"
        }
      ]
    },
    {
      "type": "section",
      "fields": [
        {
          "type": "mrkdwn",
          "text": "*IP Address*\n#remote_address"
        },
        {
          "type": "mrkdwn",
          "text": "*Timestamp*\n#timestamp"
        }
      ]
    },
    {
      "type": "actions",
      "elements": [
        {
          "type": "button",
          "text": {
            "type": "plain_text",
            "text": "Vault Login",
            "emoji": true
          },
          "value": "vault",
          "url": "https://keepersecurity.com/vault",
          "action_id": "actionId-1"
        },
        {
          "type": "button",
          "text": {
            "type": "plain_text",
            "text": "Console Login",
            "emoji": true
          },
          "value": "console",
          "url": "https://keepersecurity.com/console",
          "action_id": "actionId-2"
        }
      ]
    }
  ]
}

HTTP Body

(10) Click Save on the recipient and Save the alert.

Add Webhook

Save Alert

That's it. Please note that it can take up to 15 minutes for events to start transmitting. You can modify the HTTP Body according to your preferences. Slack's Block Kit Builder allows you to customize the look and feel completely.

Creating new Webhook body content and editing content may take up to 15 minutes to take effect.

Shared Record Notifications

Another use case is to be notified when a record is added to a particular Shared Folder.

Example Shared Record Notification

(1) Follow the Slack setup steps above to create a baseline Slack integration.

(2) In the Web Vault, grab the Shared Folder UID that you would like to report on

Shared Folder UID

(3) On the Admin Console, create a new Alert for this event that is tracking "Add Record to Shared Folder"

Alert on Record Added to Shared Folder

(4) Under the Attributes section, paste the Shared Folder UID

Add Shared Folder UID

(5) Under "Recipients", create a new Webhook recipient.

(6) Copy Paste the below JSON text body into the HTTP Body section. In the "text" field, you will want to edit it to match up with the alert that you are creating.

{
  "text": "Keeper - Added Record to Shared Folder",
  "blocks": [
    {
      "type": "section",
      "fields": [
        {
          "type": "mrkdwn",
          "text": "*Alert Name*\n#alert_name"
        }
      ]
    },
    {
      "type": "section",
      "fields": [
        {
          "type": "mrkdwn",
          "text": "*Event Details*\n#description"
        }
      ]
    },
    {
      "type": "section",
      "fields": [
        {
          "type": "mrkdwn",
          "text": "*IP Address*\n#remote_address"
        },
        {
          "type": "mrkdwn",
          "text": "*Timestamp*\n#timestamp"
        },
        {
          "type": "mrkdwn",
          "text": "*Record UID*\n#record_uid"
        }
      ]
    },
    {
      "type": "actions",
      "elements": [
        {
          "type": "button",
          "text": {
            "type": "plain_text",
            "text": "Open Record",
            "emoji": true
          },
          "value": "vault",
          "url": "https://keepersecurity.com/vault/#detail/#record_uid",
          "action_id": "actionId-1"
        },
        {
          "type": "button",
          "text": {
            "type": "plain_text",
            "text": "Console Login",
            "emoji": true
          },
          "value": "console",
          "url": "https://keepersecurity.com/console",
          "action_id": "actionId-2"
        }
      ]
    }
  ]
}