How to integrate security onion with Discord or Elastalert?

[4lizeta]

I want to create an alerts from elasticsearch but I don't find the correct way to create an integration with a webhook or with elasalert. The objetive is send alert to a webhook and/or to mail.
Thanks

[reyesj2]

External notifications is a feature of SO Pro https://docs.securityonion.net/en/2.4/notifications.html

However, nothing prevents you from creating/managing your own custom rules, and configuring notifications that way. A few other discussions have shared their work
https://docs.securityonion.net/en/2.4/elastalert.html#custom-rules
https://elastalert2.readthedocs.io/en/latest/alerts.html#alerts
#14451