category: Messaging and Conferencing
provider: Slack
deprecated: true
sectionorder:
- Connect
- Collect
commonfields:
  id: SlackV2
  version: -1
configuration:
- name: cred_access_token
  type: 9
  displaypassword: Slack API access token
  hiddenusername: true
  required: false
- name: cred_bot_token
  type: 9
  displaypassword: Slack API bot token
  hiddenusername: true
  required: false
- display: Slack API access token
  name: access_token
  type: 4
  section: Connect
  hidden: true
  required: false
- display: Slack API bot token
  name: bot_token
  type: 4
  section: Connect
  hidden: true
  required: false
- display: Dedicated Slack channel to receive notifications
  name: incidentNotificationChannel
  type: 0
  section: Connect
  advanced: true
  required: false
- defaultvalue: 'true'
  display: Send notifications about incidents to the dedicated channel
  name: notify_incidents
  type: 8
  section: Connect
  advanced: true
  required: false
- defaultvalue: Low
  display: Minimum incident severity to send messages to slack by
  name: min_severity
  type: 15
  options:
  - Unknown
  - Low
  - Medium
  - High
  - Critical
  section: Collect
  advanced: true
  required: false
- defaultvalue: Unclassified
  display: Type of incidents created in Slack
  name: incidentType
  type: 13
  section: Connect
  required: false
- display: Allow external users to create incidents via DM
  name: allow_incidents
  type: 8
  section: Collect
  advanced: true
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Trust any certificate (not secure)
  name: unsecure
  type: 8
  section: Connect
  advanced: true
  required: false
- defaultvalue: 'true'
  display: Long running instance. Required for investigation mirroring and direct messages.
  hidden: true
  name: longRunning
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Bot display name in Slack (Cortex XSOAR by default)
  name: bot_name
  type: 0
  section: Connect
  advanced: true
  required: false
- display: Bot icon in Slack - Image URL (Cortex XSOAR icon by default)
  name: bot_icon
  type: 0
  section: Connect
  advanced: true
  required: false
- defaultvalue: '60'
  display: Maximum time to wait for a rate limiting call in seconds
  name: max_limit_time
  type: 0
  section: Connect
  advanced: true
  required: false
- defaultvalue: '200'
  display: Number of objects to return in each paginated call
  name: paginated_count
  type: 0
  section: Collect
  advanced: true
  required: false
- display: Proxy URL to use in Slack API calls
  name: proxy_url
  type: 0
  section: Connect
  advanced: true
  required: false
- display: Comma separated list of tags To filter the messages sent from demisto.
  name: filtered_tags
  type: 0
  additionalinfo: Only supported in Demisto V6.1 and above.
  section: Collect
  advanced: true
  required: false
description: Deprecated. Use SlackV3 instead.
display: Slack v2 (Deprecated)
name: SlackV2
script:
  commands:
  - arguments:
    - auto: PREDEFINED
      default: true
      defaultValue: all
      description: The mirroring type. Can be "all", which mirrors everything, "chat", which mirrors only chats (not commands), or "none", which stops all mirroring.
      name: type
      predefined:
      - all
      - chat
      - none
    - auto: PREDEFINED
      defaultValue: 'true'
      description: Whether the channel is auto-closed when an investigation is closed. Can be "true" or "false". Default is "true".
      name: autoclose
      predefined:
      - 'true'
      - 'false'
    - auto: PREDEFINED
      defaultValue: both
      description: The mirroring direction. Can be "FromDemisto", "ToDemisto", or "Both". Default is "Both".
      name: direction
      predefined:
      - Both
      - FromDemisto
      - ToDemisto
    - auto: PREDEFINED
      defaultValue: group
      description: The channel type. Can be "channel" (public) or "group" (private).
      name: mirrorTo
      predefined:
      - channel
      - group
    deprecated: true
    description: Deprecated. Use the "mirror-investigation" command instead.
    name: slack-mirror-investigation
  - arguments:
    - auto: PREDEFINED
      default: true
      defaultValue: all
      description: The mirroring type. Can be "all", which mirrors everything, "chat", which mirrors only chats (not commands), or "none", which stops all mirroring.
      name: type
      predefined:
      - all
      - chat
      - none
    - auto: PREDEFINED
      defaultValue: 'true'
      description: Whether the channel is auto-closed when an investigation is closed. Can be "true" or "false". Default is "true".
      name: autoclose
      predefined:
      - 'true'
      - 'false'
    - auto: PREDEFINED
      defaultValue: both
      description: The mirroring direction. Can be "FromDemisto", "ToDemisto", or "Both". Default value is "Both".
      name: direction
      predefined:
      - Both
      - FromDemisto
      - ToDemisto
    - auto: PREDEFINED
      defaultValue: group
      description: The channel type. Can be "channel" or "group". The default value is "group".
      name: mirrorTo
      predefined:
      - channel
      - group
    - description: The name of the channel. The default is "incident-<incidentID>".
      name: channelName
    - description: The topic of the channel.
      name: channelTopic
    - auto: PREDEFINED
      defaultValue: 'false'
      description: Whether to remove the Slack administrator (channel creator) from the mirrored channel.
      name: kickAdmin
      predefined:
      - 'true'
      - 'false'
    deprecated: true
    description: Mirrors the investigation between Slack and the Demisto War Room.
    name: mirror-investigation
  - arguments:
    - default: true
      description: "The message content. When mentioning another slack user, make sure to do so in the following format: <@user_name>."
      name: message
    - description: The user to whom to send the message. Can be either the username or email address.
      name: to
    - description: The name of the Slack channel to which to send the message.
      name: channel
    - description: An entry ID to send as a link.
      name: entry
    - auto: PREDEFINED
      defaultValue: 'false'
      description: Whether to include a URL to the relevant component in Demisto. Can be "true" or "false". Default value is "false".
      name: ignoreAddURL
      predefined:
      - 'true'
      - 'false'
    - description: The ID of the thread to which to reply - can be retrieved from a previous send-notification command.
      name: threadID
    - description: A JSON string of Slack blocks to send in the message.
      name: blocks
    deprecated: true
    description: Sends a message to a user, group, or channel.
    name: send-notification
    outputs:
    - contextPath: Slack.Thread.ID
      description: The Slack thread ID.
      type: String
  - arguments:
    - default: true
      description: The text content of the message.
      name: message
    - description: Either a user name or email of a Slack user to send to.
      name: to
    - description: A Slack channel name to send to.
      name: channel
    - description: A Slack group (private channel) name to send to.
      name: group
    - description: An entry ID to send as a link.
      name: entry
    - auto: PREDEFINED
      defaultValue: 'false'
      description: Whether to add a URL in Slack to the relevant component in Demisto. Default is "false".
      name: IgnoreAddURL
      predefined:
      - 'true'
      - 'false'
    - description: The ID of the thread to which to reply.
      name: threadID
    deprecated: true
    description: Deprecated. Use the "send-notification" command instead.
    name: slack-send
  - deprecated: true
    description: Deprecated. Use the "close-channel" command instead.
    name: slack-close-channel
  - arguments:
    - description: The name of the channel to archive. If not provided, the mirrored investigation channel is archived (if the channel exists).
      name: channel
    deprecated: true
    description: Archives a Slack channel.
    name: close-channel
  - arguments:
    - default: true
      description: The ID of the file entry to send.
      name: file
      required: true
    - description: The user to whom to send the file. Can be the username or the email address.
      name: to
    - description: The name of the Slack group (private channel) to which to send the file.
      name: group
    - description: The name of the Slack channel to which to send the file.
      name: channel
    - description: The ID of the thread to which to reply - can be retrieved from a previous send-notification command.
      name: threadID
    - description: A comment to add to the file.
      name: comment
    deprecated: true
    description: Sends a file to a user, channel, or group. If not specified, the file is sent to the mirrored investigation channel (if the channel exists).
    name: slack-send-file
  - arguments:
    - description: The channel name. If not specified, the topic of the mirrored investigation channel is set (if the channel exists).
      name: channel
    - default: true
      description: The topic for the channel.
      name: topic
      required: true
    deprecated: true
    description: Sets the topic for a channel.
    name: slack-set-channel-topic
  - arguments:
    - auto: PREDEFINED
      defaultValue: private
      description: The channel type. Can be "private" or "public".
      name: type
      predefined:
      - private
      - public
    - default: true
      description: The name of the channel.
      name: name
      required: true
    - description: 'A CSV list of user names or email addresses to invite to the channel. For example: "user1, user2...".'
      name: users
    deprecated: true
    description: Creates a channel in Slack.
    name: slack-create-channel
  - arguments:
    - default: true
      description: 'A CSV list of usernames or email addresses to invite to join the channel. For example: "user1, user2...".'
      name: users
      required: true
    - description: The name of the channel to which to invite the users. If the name of the channel is not specified, the name of the mirrored investigation channel is used (if the channel exists).
      name: channel
    deprecated: true
    description: Invites users to join a channel.
    name: slack-invite-to-channel
  - arguments:
    - default: true
      description: 'A CSV list of usernames or email addresses to remove from the a channel. For example: "user1, user2..."'
      name: users
      required: true
    - description: The name of the channel from which to remove the users. If the name of the channel is not specified, the mirrored investigation channel is used (if the channel exists).
      name: channel
    deprecated: true
    description: Removes users from the specified channel.
    name: slack-kick-from-channel
  - arguments:
    - default: true
      description: The new name of the channel.
      name: name
      required: true
    - description: The current name of the channel. If the name of the channel is not specified, the mirrored investigation channel is used (if the channel exists).
      name: channel
    deprecated: true
    description: Renames a channel in Slack.
    name: slack-rename-channel
  - arguments:
    - default: true
      description: The Slack user (username or email).
      name: user
      required: true
    deprecated: true
    description: Get details about a specified user.
    name: slack-get-user-details
    outputs:
    - contextPath: Slack.User.ID
      description: The ID of the user.
      type: String
    - contextPath: Slack.User.Username
      description: The username of the user.
      type: String
    - contextPath: Slack.User.Name
      description: The actual name of the user.
      type: String
    - contextPath: Slack.User.DisplayName
      description: The display name of the user.
      type: String
    - contextPath: Slack.User.Email
      description: The email address of the user.
      type: String
  - arguments: []
    name: slack-get-integration-context
    description: Returns the integration context as a file. Use this command for debug purposes only.
    hidden: true
  - arguments:
    - description: The name of a channel or a regex pattern
      name: name
    - description: The member ID who created the channel
      name: creator
    - auto: PREDEFINED
      description: Specify True to include only archived channels, False to include only unarchived channels, or leave blank for no effect
      name: is_archived
      predefined:
      - 'true'
      - 'false'
    - auto: PREDEFINED
      description: Specify True to find the general channel (if other filters also match), False to exclude the general channel, or leave blank for no effect
      name: is_general
      predefined:
      - 'true'
      - 'false'
    - auto: PREDEFINED
      description: Specify True to include only private channels, False to include only public channels, or leave blank for no effect
      name: is_private
      predefined:
      - 'true'
      - 'false'
    - defaultValue: '20'
      description: The maximum number of channels to return
      name: limit
    deprecated: true
    description: Returns a list of channels matching criteria
    name: slack-filter-channels
    outputs:
    - contextPath: Slack.Channel.ID
      description: The channel ID
      type: String
    - contextPath: Slack.Channel.Name
      description: The channel name
      type: String
    - contextPath: Slack.Channel.Created
      description: The channel creation timestamp
      type: Number
    - contextPath: Slack.Channel.Creator
      description: The channel creator's member ID
      type: String
    - contextPath: Slack.Channel.IsArchived
      description: Has the channel been archived?
      type: Boolean
    - contextPath: Slack.Channel.IsGeneral
      description: Is the channel the general channel?
      type: Boolean
    - contextPath: Slack.Channel.IsPrivate
      description: Is the channel a private channel?
      type: Boolean
  dockerimage: demisto/slack:1.0.0.42956
  longRunning: true
  runonce: false
  script: '-'
  subtype: python3
  type: python
fromversion: 5.0.0
tests:
- No tests (auto formatted)
supportedModules:
- xsiam
- agentix