Answer service usage questions in a Slack DM
Get a concise view of top services without leaving the private conversation.
Trigger
Direct Message Received
Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.
Action
Get Profile Top Services
Tool to fetch top services accessed within a profile. Use after confirming the profile ID and desired date range.
Why this helps
Service usage questions often require an analyst to manually inspect profile analytics.
- Speed up private investigations
- Provide focused usage context
- Reduce repetitive analyst work
Setup
Build it in a few focused steps.
- 1Connect Slackbot and Control d in Notis.
- 2Create an automation named DM service usage.
- 3Tell Notis to retrieve and summarize top services for the profile named in a DM.
- 4Pick Direct Message Received and choose where reports should go.
- 5Test with one real DM asking for service usage.
Questions about this workflow
Can it compare two profiles?
The action is for a specific profile, so comparison requires separate runs and a prompt that explains how to compare them.
Will the DM trigger include group conversations?
No. Direct Message Received catches DMs, while channel messages cover channels and multi-party IM.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Slackbot to Control d. A trigger fires from one place; an action lands in another.
Slackbot triggers
Control d actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Delete Device by ID
Tool to delete a Control-D device. Use when you need to remove a device by its identifier after confirming the device_id.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Delete Profile by ID
Tool to delete a profile. Use when you need to remove a profile by its ID after ensuring it is not enforced by any device.
New Channel Created Trigger
Triggered when a new channel is created in Slack.
Delete Profile Rule by Hostname
Tool to delete a specific custom rule by hostname from a profile. Use after confirming profile_id and hostname.
Channel Message Received
Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.
Delete Profile Rule by Rule ID
Tool to delete a specific custom rule by its ID within a profile. Use after confirming profile_id and rule_id.
Direct Message Received
Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.
Delete Profile Rule in Folder
Tool to delete a specific custom rule within a folder. Use after confirming profile_id, rule_id, and folder_id.
Message Reaction Added
Triggered when a reaction is added to a message in Slack. Supports optional filtering by channel and emoji name.
Delete Profile Schedule
Tool to delete a specific schedule within a profile. Use after confirming profile_id and schedule_id.
Message Reaction Removed
Triggered when a reaction is removed from a message in Slack. Supports optional filtering by channel and emoji name.
List Known Access IPs
Tool to list known IPs associated with the account. Use when you need to retrieve recent access IPs for device resolver queries.
Reaction Added Trigger
DEPRECATED: use `SLACK_MESSAGE_REACTION_ADDED` instead. Triggered when a reaction is added to a message in Slack.
Get Analytics Endpoints
Tool to list analytics storage regions and their endpoints. Use after authenticating to retrieve available analytics regions.
Connect any two apps with Notis in the middle.
Slackbot and Control d, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Control d.