---
title: Slack
summary: null
url: https://www.fastly.com/documentation/guides/next-gen-waf/integrations/slack
---

Our Slack integration (alert) allows you to be notified when certain activity occurs on the Next-Gen WAF.

> **HINT:** 
>
> Want to set up alerting for your CDN or Compute service? Check out our [Observability](/guides/observability/alerts/about-alerts/) guides.
>
>
>

## Alerting on corp (account) activity

> **IMPORTANT:** This feature is only available to Next-Gen WAF customers with access to the [Next-Gen WAF control panel](https://dashboard.signalsciences.net).

To add a Slack integration that notifies you when corp actions occur, complete the following steps:

> **IMPORTANT:** Only [Owners](https://www.fastly.com/documentation/guides/next-gen-waf/account-info/using-user-roles-and-permissions/) can create corp-level integrations.

1. In Slack, [enable incoming webhooks](https://api.slack.com/messaging/webhooks#enable_webhooks) if you have not already.
2. [Create a new webhook](https://api.slack.com/messaging/webhooks#create_a_webhook).
3. Copy the **Webhook URL** of the new webhook.
4.   Log in to the [Next-Gen WAF control panel](https://dashboard.signalsciences.net).

5. From the **Corp Manage** menu, select **Corp Integrations**.
6. Click **Add corp integration**.
7. Select the **Slack Message** integration.
8. In the **Webhook URL** field, enter the **Webhook URL** created in Slack.
9.   Select if you want to be alerted regarding **All activity** or **Specific activity**. If you selected **Specific activity**, then in the **Activity** menu choose the activity types that you want the integration to create alerts for.

10. Click **Create corp integration**.

## Alerting on site (workspace) activity

To add a Slack integration (alert) that applies to a single site (workspace), complete the following steps:

### Next Gen Waf Control Panel

1. In Slack, [enable incoming webhooks](https://api.slack.com/messaging/webhooks#enable_webhooks) if you have not already.
2. [Create a new webhook](https://api.slack.com/messaging/webhooks#create_a_webhook).
3. Copy the **Webhook URL** of the new webhook.
4.   Log in to the [Next-Gen WAF control panel](https://dashboard.signalsciences.net).

5.   From the **Sites** menu, select a site if you have more than one site.

6. From the **Manage** menu, select **Site Integrations**.
7. Click **Add site integration**.
8. Select the **Slack Message** integration.
9. In the **Webhook URL** field, enter the **Webhook URL** created in Slack.
10.   Select if you want to be alerted regarding **All activity** or **Specific activity**. If you selected **Specific activity**, then in the **Activity** menu choose the activity types that you want the integration to create alerts for.

11. Click **Create site integration**.

### Fastly Control Panel

1. In Slack, [enable incoming webhooks](https://api.slack.com/messaging/webhooks#enable_webhooks) if you have not already.
2. [Create a new webhook](https://api.slack.com/messaging/webhooks#create_a_webhook).
3. Copy the **Webhook URL** of the new webhook.
4.   Log in to the [Fastly control panel](https://manage.fastly.com).

5.   Go to **Security** > **Next-Gen WAF** > [**Workspaces**](https://manage.fastly.com/security/ngwaf/workspaces).

6.   Click the gear <span class="inline-icons"><img src="/img/icons/gear.png" alt="Gear icon" /></span> next to the workspace that you want to modify.

7. Click **Alerts** and then **Add alert**.
8. Fill out the **Add alert** form as follows:
   - From the **Integration type** menu, select **Slack**.
   - In the **Webhook URL** field, enter the **Webhook URL** created in Slack.
   - In the **Select activities** menu, leave **Flagged IPs** checked.
9. Click **Add workspace alert**.

## Activity types

> **IMPORTANT:** This section only applies to Next-Gen WAF customers with access to the [Next-Gen WAF control panel](https://dashboard.signalsciences.net).

When setting up a Slack integration in the Next-Gen WAF control panel, you can select the type of activity that you want to be notified about.

### Corp integration

The following activity types are available for the Slack integration at the corp-level:

| Activity type                 | Description                        |
| ----------------------------- | ---------------------------------- |
| `releaseCreated`              | New release notifications          |
| `featureAnnouncement`         | New feature announcements          |
| `corpUpdated`                 | Account timeout setting updated    |
| `newSite`                     | A new site (workspace) was created |
| `deleteSite`                  | A site (workspace) was deleted     |
| `enableSSO`                   | SSO was enabled for the corp       |
| `disableSSO`                  | SSO was disabled for the corp      |
| `corpUserInvited`             | A user was invited                 |
| `corpUserReinvited`           | A user was reinvited               |
| `listCreated`                 | A list was created                 |
| `listUpdated`                 | A list was updated                 |
| `listDeleted`                 | A list was removed                 |
| `customTagCreated`            | A custom signal created            |
| `customTagDeleted`            | A custom signal removed            |
| `customTagUpdated`            | A custom signal updated            |
| `userMultiFactorAuthEnabled`  | A user enabled 2FA                 |
| `userMultiFactorAuthDisabled` | A user disabled 2FA                |
| `userMultiFactorAuthUpdated`  | A user updated 2FA secret          |
| `userRegistered`              | A user was registered              |
| `userRemovedCorp`             | A user was removed from the corp   |
| `userUpdated`                 | A user was updated                 |
| `userUndeliverable`           | A user's email address bounced     |
| `userUpdatePassword`          | A user updated their password      |
| `accessTokenCreated`          | An API Access Token was created    |
| `accessTokenDeleted`          | An API Access Token was deleted    |

### Site integration

The following activity types are available for the Slack integration at the site-level:

| Activity type                  | Description                                                    |
| ------------------------------ | -------------------------------------------------------------- |
| `siteDisplayNameChanged`       | The display name of a site (workspace) was changed             |
| `siteNameChanged`              | The short name of a site (workspace) was changed               |
| `loggingModeChanged`           | The agent mode ("Blocking", "Not Blocking", "Off") was changed |
| `agentAnonModeChanged`         | The agent IP anonymization mode was changed                    |
| `flag`                         | An IP address was flagged                                      |
| `expireFlag`                   | An IP address flag was manually expired                        |
| `createCustomRedaction`        | A custom redaction was created                                 |
| `removeCustomRedaction`        | A custom redaction was removed                                 |
| `updateCustomRedaction`        | A custom redaction was updated                                 |
| `customTagCreated`             | A custom signal was created                                    |
| `customTagUpdated`             | A custom signal was updated                                    |
| `customTagDeleted`             | A custom signal was removed                                    |
| `customAlertCreated`           | A custom alert was created                                     |
| `customAlertUpdated`           | A custom alert was updated                                     |
| `customAlertDeleted`           | A custom alert was removed                                     |
| `detectionCreated`             | A templated rule was created                                   |
| `detectionUpdated`             | A templated rule was updated                                   |
| `detectionDeleted`             | A templated rule was removed                                   |
| `listCreated`                  | A list was created                                             |
| `listUpdated`                  | A list was updated                                             |
| `listDeleted`                  | A list was removed                                             |
| `ruleCreated`                  | A request rule was created                                     |
| `ruleUpdated`                  | A request rule was updated                                     |
| `ruleDeleted`                  | A request rule was deleted                                     |
| `customDashboardCreated`       | A custom dashboard was created                                 |
| `customDashboardUpdated`       | A custom dashboard was updated                                 |
| `customDashboardReset`         | A custom dashboard was reset                                   |
| `customDashboardDeleted`       | A custom dashboard was removed                                 |
| `customDashboardWidgetCreated` | A custom dashboard card was created                            |
| `customDashboardWidgetUpdated` | A custom dashboard card was updated                            |
| `customDashboardWidgetDeleted` | A custom dashboard card was removed                            |
| `agentAlert`                   | An agent alert was triggered                                   |

## Related content

- [Webhooks](https://www.fastly.com/documentation/guides/next-gen-waf/integrations/generic-webhooks)
- [Using an API with the Next-Gen WAF](https://www.fastly.com/documentation/guides/next-gen-waf/developer/using-an-api-with-the-next-gen-waf)
