Twilio SendGrid

Details

ID	`Twilio SendGrid`
Provider	Twilio
Category	Analytics & SIEM
From Version	8.4.0
Docker Image	`demisto/python3:3.12.13.10116658`
Supported Modules	XSIAM

README

Twilio SendGrid is a cloud-based email delivery platform that provides email activity tracking and analytics. Use this integration to collect email activity events such as deliveries, opens, clicks, bounces, and spam reports.
Note: You must purchase additional email activity history to access the Email Activity Feed API.

This is the default integration for this content pack when configured by the Data Onboarder in Cortex XSIAM.

Configure Twilio SendGrid in Cortex

Parameter	Description	Required
Server URL	The SendGrid API base URL. Default: api.sendgrid.com	True
API Secret Key	Your SendGrid API key with Email Activity read permissions.	True
Maximum Email Activity Messages per fetch	Maximum number of events to fetch per fetch run. The API is limited to 1000 events per call, so multiple calls will be made if needed. Default is 10000.	False
Trust any certificate (not secure)		False
Use system proxy settings		False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

twilio-sendgrid-get-events

Returns email activity events from Twilio SendGrid. This command is used for developing/debugging and is to be used with caution, as it can create events, leading to event duplication and exceeding the API request limitation.

Base Command

twilio-sendgrid-get-events

Input

Argument Name	Description	Required
should_push_events	Set this argument to True in order to create events, otherwise the command will only display them. Possible values are: True, False. Default is False.	Required
limit	Maximum number of events to retrieve. The API is limited to 1000 events per call. Default is 1000.	Optional
from_date	Start time for event retrieval. Supports relative times (e.g., “3 days”) or ISO format (e.g., “2024-01-15T00:00:00Z”).	Optional
to_date	End time for event retrieval. Supports relative times or ISO format.	Optional

Context Output

There is no context output for this command.

Configuration parameters

server_url — Server URL (required)
api_key — API Secret Key (required)
max_fetch — Maximum Email Activity Messages per fetch
eventFetchInterval — Events Fetch Interval
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings

Commands (1)

twilio-sendgrid-get-events
Returns email activity events from Twilio SendGrid. This command is used for developing/debugging and is to be used with caution, as it can create events, leading to event duplication and exceeding the API request limitation.

Source

TwilioSendGrid.py TwilioSendGrid_test.py TwilioSendGrid.yml TwilioSendGrid_description.md command_examples.txt

Download History Raw

## Twilio SendGrid

### Prerequisites

Before configuring the integration, you need:

1. **Twilio SendGrid Account**: An active SendGrid account with email activity history enabled
2. **API Key**: A SendGrid API key with appropriate permissions

### Generating an API Key

1. Log in to your [SendGrid account](https://app.sendgrid.com/)
2. Navigate to **Settings** > **API Keys**
3. Click **Create API Key**
4. Enter a name for your API key (e.g., "XSIAM Event Collector")
5. Select **Full Access** or create a custom key with at least the following permissions:
   - **Email Activity** - Read access
6. Click **Create & View**
7. **Important**: Copy the API key immediately - you won't be able to see it again
8. Store the API key securely

### Configuration

1. Navigate to **Settings** > **Integrations** > **Servers & Services**
2. Search for **Twilio SendGrid**
3. Click **Add instance**
4. Configure the following parameters:
5. Click **Test** to verify the connection
6. Click **Save & exit**

### Email Activity History Requirement

**Important**: You must purchase [additional email activity history](https://app.sendgrid.com/settings/billing/addons/email_activity) to access the Email Activity Feed API. Without this add-on, the integration will not be able to fetch events.

### Support

For issues related to:
- **Integration configuration**: Contact Palo Alto Networks support
- **SendGrid API or account**: Contact [Twilio SendGrid support](https://support.sendgrid.com/)
- **Email Activity add-on**: Contact SendGrid billing support