# Blink Ops Destination

## **Overview**

Destinations are integrations that receive alerts from rules, policies, system health notifications, and rule errors. Panther supports configuring [Blink Ops](https://www.blinkops.com/) as the destination where you will receive alerts.

Blink Ops supports receiving alerts with a maximum payload size of 5 MB. If an alert is greater than 5 MB size due to a large alert context, Panther will truncate the alert context.

## How to set up Blink Ops alert destinations in Panther

### Step 1: Create a Panther trigger in Blink Ops

1. In the left-hand navigation bar of your Blink Ops console, click **Workspace** > **Automations**.\
   ![A navigation bar is shown, and an arrow is drawn from the "Workspace" option to the "Automations" option in its sub-navigation panel.](https://4011785613-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LgdiSWdyJcXPahGi9Rs-2910905616%2Fuploads%2Fgit-blob-eec83dbb400cc706adc7f0d27436c6124b0d16aa%2Fblinkopsnavbar.png?alt=media)
2. Within your chosen Pack, click **New Automation**.

   <figure><img src="https://4011785613-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LgdiSWdyJcXPahGi9Rs-2910905616%2Fuploads%2Fgit-blob-e9e239fe0751262d6353cbc668a93c4412452d20%2Fblinkopsautomations.png?alt=media" alt="An &#x22;Automations&#x22; page is shown. Under a header reading &#x22;1 Packs, 5 Automations,&#x22; a &#x22;New Automation&#x22; button is circled."><figcaption></figcaption></figure>
3. In the **New automation** pop-up modal, under the **What do you want to automate?** prompt, enter the following text: `Create a blank automation triggered by a Panther alert`, then click **Generate workflow**.\
   ![Under a "What do you want to automate?" header, "create a blank automation triggered by a Panther alert" is entered into a textbox. Below the textbox is a "Generate workflow" button.](https://4011785613-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LgdiSWdyJcXPahGi9Rs-2910905616%2Fuploads%2Fgit-blob-6b2b11d0a9b80155cbb35ca2f1aad6671fdba421%2Fblinkopswhatdoyouwant.png?alt=media)
   * The Blink Copilot will build the automation.\
     ![An image of a robot is above the text "Blink Copilot is generating your automation..."](https://4011785613-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LgdiSWdyJcXPahGi9Rs-2910905616%2Fuploads%2Fgit-blob-22514fd67de81a5df4284a6392cd846c410c1ce9%2Fblinkopscopilot.png?alt=media)
4. In the bottom-right corner of the resulting automation, click **Create**.\
   ![A "New automation" modal shows a prompt textbox alongside a graphical builder. In the bottom-right corner, a "Create" button is circled.](https://4011785613-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LgdiSWdyJcXPahGi9Rs-2910905616%2Fuploads%2Fgit-blob-4c03de8b35ed7993f2f4dc15cec40b9603a065b9%2Fimage.png?alt=media)
5. In the automation editor, click the `On Panther Run Webhook` trigger.\
   ![A graphical editor shows a circled rectangle reading "On PantherRunWebhook."](https://4011785613-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LgdiSWdyJcXPahGi9Rs-2910905616%2Fuploads%2Fgit-blob-9c328c9cbbe5dadbee393f58f8243a6ad635e200%2Fblinkopsautomationcanvas.png?alt=media)
6. In the **Trigger Setup** pop-up modal:
   1. In the **Webhook Event Name** field, enter a descriptive name for the webhook, e.g., `Alert from Panther`.
   2. Copy the **Webhook URL** and **Webhook API Key** values, and store them in a secure location. You will need them in the next step.
   3. Under **Authentication Method**, select **API Key**.
   4. Click **Apply**.\
      ![A "Trigger Setup" modal has various fields, including Webhook Event Name, Webhook URL, and Webhook API Key. In the bottom-right corner are "Cancel" and "Apply" buttons.](https://4011785613-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LgdiSWdyJcXPahGi9Rs-2910905616%2Fuploads%2Fgit-blob-2f3019e5cead9fe55e62d97f662e627862fd9af5%2Fblinkopstriggersetup.png?alt=media)
7. Make any desired changes to your workflow, then click **Publish & Activate**.
   * If you have already published this automation, a pop-up modal will appear. Click **Publish**.\
     ![Under a "Trigger: Event-based" header is a box labeled "On Panther Webhook Event." In the upper-right corner, a button labeled "Publish & Activate" is circled.](https://4011785613-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LgdiSWdyJcXPahGi9Rs-2910905616%2Fuploads%2Fgit-blob-15de0bc5fa440d383ea610d7663edc36efb45180%2FScreenshot%202024-05-14%20at%2012.17.05%20PM.png?alt=media)

### Step 2: Create the Blink Ops alert destination in Panther

1. In the left-hand navigation bar of your Panther Console, click **Integrations > Destinations**.
2. Click **+Add your first Destination**.
   * If you have already created Destinations, click **Create New** in the upper right side of the page to add a new Destination.
3. Click **Blink Ops**.
4. Fill out the form:
   * **Display Name**: Enter a descriptive name.
   * **Webhook URL:** Enter the **Webhook URL** provided by Blink Ops.
   * **API Key:** Enter the **Webhook API Key** provided by Blink Ops.
   * **Severity**: Select the severity level of alerts to send to this Destination.
   * **Alert Types**: Select the alert types to send to this Destination.
   * **Log Type**: By default, we will send alerts from all log types. Specify log types here if you want to only send alerts from specific log types.
   * **Allow Manual Dispatch**: Set this toggle ON if you'd like to be able to [manually dispatch alerts](https://docs.panther.com/alerts#manual-alert-dispatch) to this destination.\
     ![A "Configure your Blink Ops Destination" page is shown. Various form fields are shown, including Display Name, Webhook URL, API Key, and more.](https://4011785613-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LgdiSWdyJcXPahGi9Rs-2910905616%2Fuploads%2Fgit-blob-27aafe3ccd9ae9e109f0746ea55d56437fb844b0%2Fimage.png?alt=media)
5. Click **Add Destination**.
6. On the final page, optionally click **Send Test Alert** to test the integration using a test payload. When you are finished, click **Finish Setup**.

## Additional Information on Destinations

For more information on alert routing order, modifying or deleting destinations, and workflow automation, please see the Panther docs: [Destinations](https://docs.panther.com/destinations).
