Possible To Get EXACT Configuration Change - Automation Stitch - Sent to Slack
I'm looking to get these messages converted over to Slack notifications, but I haven't been able to figure out how to do so. I've found this thread, but it is looking specifically for emails: https://forum.fortinet.com/tm.aspx?m=187812
I have configured the slack notification for configuration change in the automation, but it only advises when an admin made changes during their session, not what they changed.
You can send emails to a Slack channel though so that *would* work I think. Do you not like the formatting when you do it that way?
I can't say I'm familiar with the actual Slack automation stitch...it's just a way I started getting alerts from a variety of things a while back.
I posted the solution in the thread you referenced. It looks like you're only using the Automation Stitch notifications which don't send the details of what changed, unlike the old "Alert Email Settings" option. Since the "Alert Email Settings" isn't present in the web interface anymore in 6.4 and 7.0 you have to set this using the command line.
If you open your command line and type ...
config alertemail setting
... you should see something like this:
config alertemail setting set username "email@example.com" set mailto1 "firstname.lastname@example.org" set configuration-changes-logs enableend
If you don't see this, use these 5 commands to enable change notifications. This should enable the e-mails you're looking for, and hopefully you can send those to Slack to get processed (haven't done this myself).
If you have done this already and it's not working, post back and I'll see if I can help.
Thank you for your response. There's no way to switch those email alerts to Slack alerts (without sending it to a slack email) I'll take what I can get, but would rather have wording in the message rather than an 'attachment' I would need to open. I do have those emails generating already, but have been asked to convert to Slack messages