CounterMeasures often return valuable information that is useful when debugging incidents. Quick access to the output is key and is why we allow you to send it to Slack.
Sending CounterMeasure output to Slack relies on Alert Timelines - which makes integrating as easy as adding a new event on your timeline.
The first step is to make sure you have the most recent Slack integration, which is the FortiMonitor Slack App. Check out the docs if you're using an older version or need a fresh install.
Add your Slack integration to any Alert Timelines you'd like to receive CounterMeasure output.
When configuring a CounterMeasure that has output you'd like sent to Slack, check the Send Output to Slack box. When the CounterMeasure runs, any returned output will now be sent to Slack.
Send Output to Slack