Slack access logs
The Coralogix Slack integration can collect your Slack workspace access logs into Coralogix, so you can monitor and investigate sign-in activity alongside the rest of your telemetry. This is the same Slack integration used for Case notifications; you enable access-logs collection as one of its Application functionality options.
Note
Collecting access logs requires the Slack admin scope. The admin scope is not part of the Slack Marketplace listing, so this capability sits outside the Marketplace-certified notifications experience. To request access, contact your account representative or Support.
This is distinct from Slack Audit logs, which is a separate integration for Enterprise Grid audit events.
What you need
To set up this integration, you need permission to manage integrations in Coralogix:
| Resource | Action | Description |
|---|---|---|
integrations | ReadConfig | View deployed integrations. |
integrations | Manage | Add, remove, or update integrations. |
You also need a Slack user who can authorize the admin scope in your workspace.
Set up
- From the Coralogix toolbar, go to Data Flow, then Integrations.
- Select Slack, then select Add New.
- Enter an Integration name.
- Under Application functionality, select Collect access logs.
- Select Create.
- In Install the Coralogix Application, select Authorize, review the scopes on the Slack page, and select Allow.
OAuth scopes
When you enable Collect access logs, the integration requests these scopes:
| Scope | Reason |
|---|---|
openid | Identify the Slack user and connect their account with Coralogix. |
admin | Read access logs for the current team and forward them to Coralogix. |