Slack
Create an App#
You must be logged in as the Owner of your organization and you must have at least an Enterprise account.
Log in to your Slack account using the following link: https://api.slack.com/apps.
Click Create New App.
Provide the appropriate app name in the search bar and then select the workspace.

Select OAuth & Permissions from the left navigation.
Provide redirect as: https://localhost
Scroll down to the User Token Scopes section and add the auditlogs:read scope, as seen in the following image:

Select Manage Distribution from the left navigation.

Ensure each step in the Share Your App with Other Workspaces section is complete with a green check mark.

Click Remove Hard Coded Information in the Share Your App with Other Workspaces section, and then check the box next to I’ve reviewed and removed any hard-coded information.
Copy the sharable URL and paste it into a browser.
Select the drop-down menu in upper right hand corner and then choose an organization.

Ensure that you install the Audit Logs in the My Grid Org workspace.
The newly created app must complete the OAuth flow to obtain an access token. The access token is used in Securonix for authentication.
Obtain OAuth Token#
Complete the following steps to exchange the temporary authentication code for an OAuth Token:
- Go to sharable URL > Allow, and then take the code value from the redirected URL.
- Complete the exchange using a curl command. The curl command leverages the temporary code from the redirected URL, along with the client ID and client secret from the Basic Information section of the app.
curl -F code=1234 -F client_id=3336676.569200954261 -F client_secret=ABCDEFGH https://slack.com/api/oauth.v2.access
When the call is executed, Slack sends an HTTP response with the access_token, as seen in the following image:

When the app completes the OAuth flow, you are granted an OAuth token under OAuth & Permissions section, as seen in the following image. The OAuth token is used for calling all the Audit Log API methods for your organization.
- Capture and secure the token value. You will need to send this to SolCyber.

xoxp-is not needed for create data source.