# Slack access logs

The Coralogix Slack integration can collect your Slack workspace access logs into Coralogix, so you can monitor and investigate sign-in activity alongside the rest of your telemetry. This is the same Slack integration used for [Case notifications](https://coralogix.com/docs/integrations/pull/slack/index.md); you enable access-logs collection as one of its **Application functionality** options.

Note

Collecting access logs requires the Slack `admin` scope. The `admin` scope is not part of the Slack Marketplace listing, so this capability sits outside the Marketplace-certified notifications experience. To request access, contact your account representative or Support.

This is distinct from [Slack Audit logs](https://coralogix.com/docs/integrations/pull/slack-audit-logs/index.md), which is a separate integration for Enterprise Grid audit events.

## What you need

To set up this integration, you need permission to manage integrations in Coralogix:

| Resource       | Action       | Description                          |
| -------------- | ------------ | ------------------------------------ |
| `integrations` | `ReadConfig` | View deployed integrations.          |
| `integrations` | `Manage`     | Add, remove, or update integrations. |

You also need a Slack user who can authorize the `admin` scope in your workspace.

## Set up

1. From the Coralogix toolbar, go to **Data Flow**, then **Integrations**.
1. Select **Slack**, then select **Add New**.
1. Enter an **Integration name**.
1. Under **Application functionality**, select **Collect access logs**.
1. Select **Create**.
1. In **Install the Coralogix Application**, select **Authorize**, review the scopes on the Slack page, and select **Allow**.

## OAuth scopes

When you enable **Collect access logs**, the integration requests these scopes:

| Scope                                           | Reason                                                               |
| ----------------------------------------------- | -------------------------------------------------------------------- |
| [`openid`](https://api.slack.com/scopes/openid) | Identify the Slack user and connect their account with Coralogix.    |
| [`admin`](https://api.slack.com/scopes/admin)   | Read access logs for the current team and forward them to Coralogix. |

## Related resources

- [Slack integration](https://coralogix.com/docs/integrations/pull/slack/index.md)
- [Slack Audit logs](https://coralogix.com/docs/integrations/pull/slack-audit-logs/index.md)