Skip to main content

Integration Triggers in Torq: Ingest Data

Trigger automated workflows based on events from external systems.

Updated this week

Trigger Torq workflows from any event within your security stack. Torq securely communicates with any application via dedicated webhooks, allowing you to automate alert cataloging, ticket management, incident management, identity verification, and much more.

After you create a trigger integration in Torq you will receive a webhook you can provide to the third-party service from which you want to get events. Every service has a different process for receiving webhooks, so we recommend you check out the Torq integration documentation for relevant information.

Torq does not normalize or manipulate the trigger event JSON.

How to use

  1. Create the integration trigger: Set up an integration (or webhook) with the third-party service that will send events to Torq.

  2. Add the trigger to a workflow: When creating a new workflow, select the Integrations trigger.

  3. Select the integration instance: Choose the integration instance that will send events to the workflow.

  4. (Optional) Replace a trigger: Replace an existing trigger with a different trigger type if your automation requirements change.

  5. (Optional) Add trigger conditions: Add trigger conditions to determine which events will start workflow executions.

  6. (Optional) View event history: View past trigger events to monitor activity, troubleshoot issues, or verify that events were received and processed correctly.

  7. (Optional) Resend events: Resend any past event, either to test the current workflow functionality or to rerun a production event.

Run and test workflows

The Exit operator returns the data to the parent workflow in the case of nested workflows, and to the AI Agent or Socrates when the workflow is used as a tool.

  1. Execute a test run: After adding steps, click Test Run to manually initiate the workflow.

  2. Use trigger data: Incorporate event data in workflow steps with $.event.<event_structure>.

Publish and share workflows

Publishing and sharing help you manage workflow lifecycle and collaboration in Torq:

  • Publishing makes a workflow active and available for execution within your workspace.

  • Sharing allows you to distribute a workflow across multiple workspaces for reuse and collaboration.

Did this answer your question?