Skip to content

Send notifications to a Mattermost channel#

Using Mattermost as Notifier requires to create at least one endpoint. This endpoint defines how TheHive will connect to Mattermost.

Create an enpoint#

In the Organisation configuration view, open the Endpoints tab. Then, click on the button to create a new Notifier.

Enpoints list

Enpoint configuration#

Choose Mattermost and complete required information.

Mattermost endpoint configuration

  • Name: give a unique name to the endpoint
  • URL: specify the URL to connect to your Mattermost instance
  • Username: default username used to send data
  • Channel: default channel used to send data
  • Auth Type: Use Basic authentication to connect to this endpoint, or use Key or Bearer method
  • Proxy settings: choose to use a web proxy to connect to this endpoint
  • Certificate authorities: add custom Certificate Authorities if required (PEM format)
  • SSL settings: disable Certificate Authority checking and/or checks on hostnames

Then, click confirm to create the endpoint.

Notification configuration#

When creating a Notification select Mattermost as Notifier and complete the form.

Choose Mattermost

TheHive uses Handlebars to let you build templates with input data, and this can be used in most of all fields of the form:

  • Endpoint: choose the endpoint to use
  • Username: choose a username. Click on add variable if you want to use an information from the input data. This will override the default username configured in the endpoint
  • Channel: choose the target channel on Mattermost to send data to. Click on add variable if you want to use an information from the input data. This will override the default channel configured in the endpoint
  • Template:
    • Available format are: JSON, Markdown and Plain text
    • Click Add variable to select a variable to insert in the template

Then click confirm to register this Notifier.