Kaspersky Container Security

Setting up integration with notification outputs

Kaspersky Container Security can notify users about events while operating in accordance with the response policy settings. To use the notification feature, you should set up an integration of Kaspersky Container Security with one or more notification outputs.

Kaspersky Container Security can use the following outputs:

  • Email
  • Telegram instant messaging system

In this Help section

Viewing the list of integrations with outputs

Adding email integrations

Viewing information about email integration

Adding Telegram integrations

Viewing and editing information about integration with Telegram

Deleting integrations with notification outputs

Page top
[Topic 250406]

Viewing the list of integrations with outputs

To view the list of configured integrations with outputs:

  1. Go to the Administration → Integrations → Notifications section.
  2. Depending on the type of notification you want, go to the Email tab or the Telegram tab.

The table with a list of all configured integrations displays the following information about existing integrations:

  • Integration name.
  • Updated by.
  • Date and time of the last update.
  • Status of the last connection to the output—Success or Error. If Error is displayed, the solution also displays a brief description of the connection error.

In the table, you can:

  • Add new integrations with email or Telegram. Click Add integration above the table to open the integration settings window.
  • View and edit the settings of integration with outputs. You can open the editing window by clicking the integration name link.

    In this window, you can also click Test connection to see if integration with an output is completed.

  • Delete integration with outputs.
Page top
[Topic 274627]

Adding email integrations

To add an email integration:

  1. Under AdministrationIntegrations → Notifications, in the Email section, click Add integration.

    The integration settings window opens.

  2. Specify the following information in the form:
    • Name of the integration — Displayed in the response policy settings.
    • User name and password of the account used to send messages.
    • SMTP server name.
    • E-mail encryption method.
    • Port that the SMTP server uses.
    • Email address of the message sender.
    • Email addresses of message recipients. You can enter one or more addresses in this field.
  3. Click Test connection to see if a connection with email can be established.
  4. Click Add to save the email integration settings.

Example email integration settings

The following is an example of the settings for integrating Kaspersky Container Security with email.

{

"form": {

"type": "email",

"name": "Email integration",

"username": "username@example.com",

"password": "P@ssword!",

"host": "smtp.company.com",

"port": 465,

"encrypting": "ssl",

"sender": "sender@example.com",

"recipients": [

"user@company.com",

"user1@company.com"

]

}

}

For the encrypting parameter, specify one of the following options:

  • tls
  • ssl
  • null

You can use the configured integration in response policies.

Page top
[Topic 275119]

Viewing information about email integration

To view and change an email integration:

  1. In the Email section, under Administration → Integrations → Notifications, click the integration name link in the list of integrations.
  2. In the editing window that opens, change the following integration settings if necessary:
    • Name.
    • User name.
    • Password of the user account that is used to send messages.
    • SMTP server name.
    • E-mail encryption method.
    • Port that the SMTP server uses.
    • Email address of the message sender.
    • Email addresses of message recipients.
  3. Click Test connection to see if a connection with email can be established.
  4. Click Save.
Page top
[Topic 275120]

Adding Telegram integrations

To add a Telegram integration:

  1. Under AdministrationIntegrations → Notifications, under Telegram, click Add integration.

    The integration settings window opens.

  2. Specify the following information in the form:
    • Name of the integration — Displayed in the response policy settings.
    • ID of the chat to post the messages — you can get the ID in the following way:
      1. Write the first message to the message bot. The chat ID is generated the first time a message is sent.
      2. In the address bar of your browser, type:

        https://api.telegram.org/bot<token>/getUpdates

        where <token> is the token of the message bot.

      3. In the received .json response file, find the "ID" value in the "chat" object. This is the chat ID.

      After changing the message history visibility settings for new participants in a Telegram chat, the chat ID is also changed. In this case, you must change the Telegram integration settings and specify the new value for the chat ID.

    • Token of the message bot — you receive this token as a result of executing the /newbot command in the BotFather bot to create a bot. You can also get the token of a previously created bot by running the /token command.
  3. Click Test connection to see if a connection with Telegram can be established.
  4. Click Add to save the Telegram integration settings.

Example Telegram integration settings

The following is an example of the settings for integrating Kaspersky Container Security with Telegram.

{

"form": {

"type": "telegram",

"name": "Telegram integration",

"chatId": "{{chatId}}",

"botToken": "{{botToken}}"

}

}

You can use the configured integration in response policies.

Page top
[Topic 275121]

Viewing and editing information about integration with Telegram

To view and change a Telegram integration:

  1. Under Telegram in the Administration → Integrations → Notifications section, click the integration name link in the list of integrations.
  2. In the editing window that opens, change the following integration settings if necessary:
    • Name.
    • Chat ID.
    • Bot token.
  3. Click Test connection to see if a connection with Telegram can be established.
  4. Click Save.
Page top
[Topic 275122]

Deleting integrations with notification outputs

To delete email integration or Telegram integration:

  1. Open the list of configured email or Telegram integrations in the AdministrationIntegrationsNotifications section.
  2. Select the integration that you want to delete by selecting the check box in the row with the integration name.
  3. Click Delete above the table.

    The Delete button becomes enabled after you select one or more integrations.

  4. In the window that opens, confirm the deletion.

You cannot delete an integration that is used in one or more response policies.

Page top
[Topic 274659]