The below configuration guides will explain how to create a custom BlueApp to collect events from Cisco Secure Email Threat Defense. Once the app is working, don't forget to create a rule if you would like to get alarms in response to specific events.