Hello,
I am integrating Atlassian Guard Detect alerts into a SIEM (NGSIEM / Falcon LogScale) using the official guidance here:
https://support.atlassian.com/security-and-access-policies/docs/send-alerts-to-a-siem-slack-or-other-tools/
However, the events we receive appear to be missing the actual payload (JSON body) and only contain metadata.
The times of the events received in our SIEM match the timestamps of the alerts in atlassian guard dashboard, but the events received are empty, have no payload/rawstring.