Coro supports webhook integrations to collect ticket data related to an event and send it from the Coro console to a specified URL endpoint, such as the REST API of an internal IT system.
Use this guide to configure Coro with a generic webhook connector.
To configure a generic webhook connector:
From the sidebar, select Control Panel.
Under Workspace, select Connectors:
Coro displays the Connectors page.
Select SIEM:
Select ADD CONNECTOR.
Coro displays the Add connector dialog:
Configure the following connection settings:
Name: Enter a suitable connector name.
Format: Select Generic.
Listener URL: Enter the webhook endpoint provided by your internal IT system.
Apply to all customers: (MSP admin users only) Enable this option to automatically create the connector in all descendant workspaces linked to the channel workspace. Each descendant workspace then forwards events to the configured SIEM provider.
(Optional) To configure request headers, such as for authentication or custom metadata, select + Header:
Headers allow your webhook to send additional information, such as an authorization token, along with the request.
To protect sensitive information, Coro encrypts all headers before storing them.
Select Add:
Coro sends a test event to verify your configuration. If the configuration is incorrect, Coro displays an error dialog. Select GOT IT to return to the Connectors page. Coro does not save the configuration:
If the configuration is correct, Coro creates the connector with a status of Connected:
For MSP channel workspaces, Coro adds the connector to the channel workspace and, if Apply to all customers is enabled, to all connected descendant workspaces.
Coro sends event data and metadata to the configured SIEM in real time. If the SIEM is unavailable, Coro cannot collect or send event data.