Skip to main content
The Slack RTS connector integrates Glean with Slack workspaces and Slack Enterprise Grid organizations via Slack’s real-time search (RTS) APIs. This connector fetches Slack messages live at query time to ensure results are up to date and permission-aware. Use this connector together with the Slack connector:
  • Use Slack Real Time Search for live message retrieval at query time.
  • Use Slack for engagement signals, proactive experiences, and optional message indexing if Slack grants a rate-limit exception.
For deployment guidance, see the Slack connectors overview.

​
Key capabilities

  • Search: Queries Slack’s real-time search endpoint directly and returns message results to Glean in real time.
  • Identity crawls: Periodic full and incremental identity crawls provide user, channel, and related metadata used by Gleanbot/actions and to enrich search responses.
  • Enterprise Grid support: Organization-wide deployment across multiple workspaces.
  • Central OAuth App: Uses a Glean-managed, centrally hosted Slack app listed in the Slack Marketplace.
  • Gleanbot and Actions: Bot user for posting messages, receiving mentions, and handling slash commands.
  • Webhooks: Real-time event handling for identity events and triggering Gleanbot.

​
Modes (Select during setup)

  • Single Workspace: One datasource instance authorized for a single workspace. Recommended for customers with a single Slack workspace.
  • Enterprise: One datasource instance authorized for the Slack Enterprise Grid organization; covers all workspaces. Recommended for enterprise customers with multiple workspaces and slack enterprise license.

​
Supported objects

  • Public channels (messages and threads)
  • Private channels (messages and threads, if authorized)
  • Direct messages (DMs) and group DMs (if authorized)
  • Channel and user metadata (for search enrichment and Gleanbot features)

​
Supported API endpoints

API EndpointPurpose
assistant.search.contextReal-time search endpoint (RTS)
users.listList users in a workspace
users.infoFetch user details
conversations.listList all channels (public, private, DMs, MPIMs)
conversations.membersList members of a channel
team.infoFetch workspace/team metadata
auth.teams.listList all workspaces accessible to the app

​
Crawling strategy

Slack Real Time Search is a federated connector. It does not crawl or index Slack message content.
  • No content crawls: Glean never runs scheduled crawls for Slack messages. Message bodies are retrieved live from Slack at query time via the RTS API and processed in memory only. They are not written into Glean’s long‑term Slack index in RTS‑only mode.
  • Identity crawls only: Glean runs full and incremental crawls for users, channels, workspaces, and memberships. This identity metadata is stored in Glean and used to enrich RTS results and power Glean in Slack and actions.
  • Webhooks for events: Slack event webhooks deliver real‑time updates (for example, membership changes and bot triggers). These events keep identity and Gleanbot up to date, but do not change the zero‑copy behavior for Slack message content.

​
Crawl types

Crawl typeFull crawlIncrementalStores content?Delivery mechanismNotes
IdentityYesYesNoScheduled API callsUsers, channels, workspaces, memberships
ContentNoNoNoN/ANo content crawls; Slack messages are federated only
Real‑time searchN/AN/ANoPer‑query RTS API callsLive assistant.search.context calls on each query
WebhooksNoNoNoSlack event webhooksIdentity updates and Glean in Slack / Gleanbot triggers

​
Results display

Search results display individual Slack messages, including context (a few messages before and after the match, often within the same thread). When used with Glean Assistant, results may include additional context. If Slack’s AI Search is enabled, semantic search is supported for natural language queries.

​
Connect Slack to Glean

Review the following requirements before setting up your connector.

​
Requirements

  • Slack Admin or Owner privileges are recommended to authorize the app, complete org-level installation (Enterprise), and manage app visibility. For more information, see Find owners and admins.
  • Slack workspace domain, e.g., if your Slack URL is yourdomain.slack.com, the domain is yourdomain.
  • Slack workspace ID. Your Slack Workspace ID (starts with T…) and, for Enterprise Grid, your Enterprise ID (starts with E…).
Each user must individually authorize the app to access their private messages and DMs.

​
Decide your mode

You can select single workspace or Enterprise (org-level) based on your Slack plan and target scope.
  • Slack Real Time Search (Single workspace)
  • Slack Real Time Search Enterprise

​
If you already have a custom Glean Slack app

This section applies when you have an existing Slack or Slack Enterprise Grid connector and it was setup through a custom Slack app.
  • If you do not have a custom app installed: Proceed directly to the Set up Slack Real Time Search steps to add your account details and authorize the connector.
  • If you have an existing custom app: You must update its manifest file to migrate Glean in Slack and proactive use cases. Because both apps use identical names and slash commands (such as /glean), updating the manifest ensures the new RTS connector can be configured without conflicting with your existing app.
For more information, see Slack Custom App Upgrade Guide.
  1. In the Glean Admin console, go to Data sources.
  2. Select Slack Real Time Search for a single workspace, or Slack Real Time Search Enterprise for an Enterprise Grid (org-level) Slack.
  3. Click the Setup tab.

​
Retrieve IDs from Slack

  1. In a new web browser tab, sign in to your Slack workspace at app.slack.com/client, then collect the required domain and ID values based on your Slack account type.
For a Single Workspace
  1. Slack Domain: Click your workspace name (top-left). The domain is the text before .slack.com (e.g., if the URL is acme.slack.com, acme is your domain.) You need to enter this value in the Slack domain field in Glean.
  2. Slack Team ID: Look at your browser’s address bar. The page URL should look like https://app.slack.com/client/T12345678/.... The ID starting with T immediately following /client/ is your Slack Team ID (e.g., T12345678). You need to enter this value into the Slack team ID field in Glean.
For Slack Enterprise Grid
  1. Slack Enterprise Domain: Click your organization’s name (top-left). The domain is the text before .enterprise.slack.com (for example, if the URL is acme.slack.com, acme is your domain.) You need to enter this value in the Slack domain field in Glean.
  2. Slack Enterprise ID: Look at your browser’s address bar. The page URL should look like https://app.slack.com/client/E12345678/.... The ID starting with E immediately following /client/ is your Enterprise ID (e.g., E12345678). You need to enter this value into the Slack Enterprise ID field in Glean.

​
Enter Slack IDs in Glean

Enter your identifiers into the corresponding fields in the Glean setup page:
  • For a Single Workspace: Enter your Slack domain and your Slack team ID (T-prefix).
  • For Enterprise Grid: Enter your Slack Enterprise domain and your Enterprise ID (E-prefix).

​
Authorize Slack

  1. Click Authorize in Glean. You’ll be redirected to Slack to authorize the Glean Slack app. For Enterprise, perform an org-level install so the app is installed to all workspaces in the Grid.
  2. Complete the OAuth consent; tokens are stored in your Glean deployment.
RTS uses a centrally hosted Glean Slack app; you do not create a custom Slack app, do not configure your own event subscriptions, and do not generate app-level tokens. Webhooks are routed via the central Slack app and require no extra configuration once installed.
For Enterprise: Verify the app appears at the organization level in Slack’s app management and is available in all intended workspaces.

​
End‑user authorization

  • Each user must authorize the Slack app to see permission‑aware Slack results (private channels, DMs, and group DMs).
  • Until a user authorizes, RTS calls run without their user token and typically return only content from public channels.
  • Glean uses the user’s OAuth token to make RTS calls on their behalf. Users may be prompted to re‑authorize if:
    • The token is revoked in Slack.
    • Scopes are changed.
    • The app is reinstalled or moved.
  • In Glean’s UI, admins can expect:
    • An authorization prompt when a user first needs Slack results (for example, a modal on first search).
    • A banner or inline notice if Slack is not authorized and RTS results cannot be shown.

​
Authentication and scopes

RTS uses the central Slack app. After the OAuth flow, user tokens are stored in your deployment and used for both identity crawls and federated search. Scopes requested: 
user:
  - channels:read
  - groups:read
  - im:read
  - mpim:read
  - search:read.files
  - search:read.im
  - search:read.mpim
  - search:read.private
  - search:read.public
  - team:read
  - users:read
  - users:read.email

bot:
  - app_mentions:read
  - assistant:write
  - channels:history
  - channels:read
  - chat:write
  - chat:write.public
  - commands
  - groups:history
  - groups:read
  - im:history
  - im:write
  - links:read
  - links:write
  - mpim:history
  - mpim:read
  - reactions:write
  - users:read

​
Webhooks and events

Webhooks are routed through the central Slack app to your deployment; routing is based on team_id or enterprise_id. No additional configuration is required after installation. Event endpoints:
  • /datasources/slack/rts_events: Umbrella endpoint handling user and bot events (messages, channel membership changes, channel lifecycle events, etc.).
  • /datasources/slack/rts_command: Slash commands (e.g., /glean {query}).
  • /datasources/slack/rts_interaction: Interactive components (buttons, modals).
Event types handled (selected):
  • Identity-related: channel_created, channel_deleted, channel_left, channel_rename, channel_unarchive, group_deleted, group_left, member_joined_channel, member_left_channel, team_join
  • Gleanbot-related: app_home_opened, app_mention, assistant_thread_context_changed, assistant_thread_started, link_shared, message.channels, message.groups, messages.im, message.mpim, team_join

​
Search results, context, and semantics

  • Context Messages: Glean Search Page shows individual messages; in assistant, surrounding context (before/after the match) is included, typically within the same thread.
  • Keyword vs. Semantic Search: Slack defaults to keyword search. If Slack’s AI Search is enabled in the customer workspace, semantic search is supported and is typically triggered when a query is phrased as a natural language question (starts with “what/where/how…”, or ends with a question mark). This can be confirmed via assistant.search.info.is_ai_search_enabled.

​
Rate limiting and performance

RTS respects Slack’s tiered API limits via per-endpoint queue routing for identity and metadata endpoints; search queries are executed on-demand (not queued) and can hit rate limits during high usage. For more information, see Rate limits.

​
Gleanbot and actions

Gleanbot and actions require:
  • Slack Real Time Search connector enabled and authorized.
  • Slack connector enabled (for event webhooks and ranking signals).
  • After setup, Glean runs a full identity crawl (users, channels, memberships) using the Slack RTS connector. That crawl must complete at least once for Slack search results, Glean in Slack, and ranking signals to be fully accurate.
  • For more information, see Glean in Slack RTS and Slack actions.

​
Security notes

  • OAuth tokens are stored on your Glean deployment.
  • RTS uses both user and bot scopes as listed above; these enable search, identity crawls, and Gleanbot features.
  • Slack Real Time Search is designed to comply with Slack’s RTS terms:
    • RTS queries are executed live against Slack; message bodies are processed in memory and are not written into Glean’s long‑term Slack index in RTS‑only mode.
    • Glean stores only what is needed to operate the connector securely, such as encrypted OAuth tokens and non‑content identity metadata (users, channels, workspace IDs).