📄️ Amazon EventBridge
You can configure an Amazon EventBridge Event bus (formerly CloudWatch Event bus) as a Lacework alert channel called Amazon CloudWatch within the platform. For more information about sending and receiving events between AWS accounts, see Amazon CloudWatch EventBridge.
📄️ AWS Security Hub
The Lacework integration with AWS Security Hub pushes cloud security events from the Lacework Polygraph Data Platform (PDP) to Security Hub via the EventBridge alert channel, allowing your organization to manage all AWS posture and compliance events from a single, consolidated view.
📄️ Cisco Webex Teams
You can configure a Lacework alert channel to forward alerts to a Webex Teams space as an incoming webhook.
📄️ Datadog
The Datadog alert channel provides a unified view of your metrics, logs, and performance data combined with your cloud security data.
📄️ Elastic/ELK stack
Lacework recommends this alert channel workflow to forward Lacework alerts to your Elastic stack: Send Lacework alerts to SQS via Amazon CloudWatch and then retrieve the alerts from SQS via a plugin from Elastic.
📄️ Email
Lacework can generate and send alert summaries and reports to email addresses using an email alert channel. By default, Lacework creates a single email alert channel during the initial Lacework onboarding process and new members are added automatically. The default channel cannot be edited. You can add more email alert channels.
📄️ Google Cloud Pub/Sub
You can configure Lacework to forward events to this Google Cloud Pub/Sub asynchronous messaging service using the Lacework Google Cloud Pub/Sub alert channel. For more information about Google Cloud's asynchronous messaging service, see Google Cloud Pub/Sub.
📄️ Google Eventarc
Prerequisites
📄️ IBM QRadar
To create an IBM QRadar alert channel, follow the steps in the sections below.
📄️ Jira
You can configure Lacework to forward events to Jira using the Jira integration REST API. Lacework calls the Jira integration REST API and creates a new Jira open issue for each Lacework event that meets or exceeds the specified alert severity level. If there is a large volume of events that exceed the ability of Jira REST API to create new Jira issues, priority is given to those events with the highest severity.
📄️ Microsoft Teams
You can configure Lacework to forward alerts to a Microsoft Teams channel through an incoming webhook. Before completing the process in the Lacework Console, you must add a Microsoft Teams incoming webhook connector. Lacework recommends creating a dedicated channel for Lacework events.
📄️ New Relic
You can configure a Lacework alert channel to forward alerts to New Relic using the Insights API. To configure Lacework to forward events, you need your New Relic account ID and insert key.
📄️ Opsgenie
The instructions and screenshots included in this document reflect the setup flow for the Standard and Enterprise version of OpsGenie.
📄️ PagerDuty
PagerDuty + Lacework Integration Benefits
📄️ ServiceNow
You can configure Lacework to forward alerts to ServiceNow using the ServiceNow REST API.
📄️ Slack
You can configure Lacework to forward alerts to a Slack channel through an incoming webhook. Before completing the process in the Lacework Console, you must create an incoming Slack webhook. Lacework recommends creating a dedicated Slack channel for Lacework events.
📄️ Splunk
You can configure Lacework to forward alerts to Splunk using an HTTP Event Collector (HEC).
📄️ Sumo Logic
A Lacework Amazon CloudWatch alert channel can forward Lacework alerts to you via CloudWatch. You can then configure a rule to send alerts to a specified target via SNS. After this is setup, you can subscribe a Sumo Logic custom app endpoint to the SNS topic. This allows your Lacework alerts to be sent via SNS (Simple Notification Service) subscription to your Sumo Logic custom app endpoint where you can view alert data in Sumo Logic.
📄️ VictorOps
You can configure Lacework to forward alerts to specific VictorOps groups using a VictorOps REST endpoint.
📄️ Webhook
You can create a custom webhook that receives Lacework alert notifications from a Lacework alert channel and forwards those alerts to another application.