Customers would like Slack setup as a source so they can ingest Slack access data into the SIEM. https://docs.slack.dev/admins/audit-logs-api/