---
title: KnowBe4 PhishER
description: ''
slug: /help/docs/integrations/automation-integrations/knowbe4-phisher/
canonical: https://www.sumologic.com/help/docs/integrations/automation-integrations/knowbe4-phisher/
---

import useBaseUrl from '@docusaurus/useBaseUrl';

<img src=/help/img/platform-services/automation-service/app-central/logos/knowbe4-phisher.png alt="KnowBe4 PhishER icon" width="100"/>

***Version: 1.7  
Updated: April 29, 2026***

KnowBe4 PhishER Identifies and responds to email threats faster with automatic prioritization for emails, also helps your InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.

## Actions

* **Get Message** *(Enrichment)* - Returns a PhishER message by ID.
* **Search Messages** *(Enrichment)* - Returns paginated messages based on the specified Lucene query.
* **PhishER Messages Daemon** *(Daemon) -* Automatically pull messages based on the specified Lucene query.

## KnowBe4 PhishER Configuration

Follow the steps from the KnowBe4 PhishER [guide](https://developer.knowbe4.com/graphql/phisher/page/Introduction) to create your authentication credentials.

## Configure KnowBe4 PhishER in Automation Service and Cloud SOAR

import IntegrationsAuth from '../../reuse/integrations-authentication.md';
import IntegrationCertificate from '../../reuse/automation-service/integration-certificate.md';
import IntegrationEngine from '../../reuse/automation-service/integration-engine.md';
import IntegrationLabel from '../../reuse/automation-service/integration-label.md';
import IntegrationProxy from '../../reuse/automation-service/integration-proxy.md';
import IntegrationTimeout from '../../reuse/automation-service/integration-timeout.md';

<IntegrationsAuth/>
* <IntegrationLabel/>
* **API URL**. Enter the [PhishER base URL](https://developer.knowbe4.com/graphql/phisher/page/Base-URL) for the KnowBe4 server that is closest to your geographic location.

* **API Token**. Enter your KnowBe4 PhishER [API key](https://developer.knowbe4.com/graphql/phisher/page/Authentication).
* <IntegrationTimeout/>
* <IntegrationCertificate/>
* <IntegrationEngine/>
* <IntegrationProxy/>

<img src=/help/img/platform-services/automation-service/app-central/integrations/misc/knowbe4-phisher-configuration.png style={{border:'1px solid gray'}} alt="KnowBe4 PhishER configuration" width="400"/>

For information about KnowBe4 PhishER, see [KnowBe4 PhishER documentation](https://support.knowbe4.com/hc/en-us/articles/360010802673-PhishER-Product-Manual).

## Change Log

| Version | Date | Description |
|:--|:--|:--|
| v1.7 | April 29, 2026 | Upgraded the `python3_generic` Docker image (Python 3.8) to `python3_12_generic` (Python 3.12) to address Python 3.8 end-of-life and improve security and performance. |
| v1.6 | March 4, 2024 | Updated code for compatibility with Python 3.12. |
| v1.5 | September 26, 2023 | Updated the **Get Message** action. |
| v1.4 | August 24, 2023 | Added a new daemon: **PhishER Messages Daemon**. |
| v1.3 | June 26, 2023 | Removed unnecessary empty lines and made other minor changes. |
| | April 26, 2023 | Initial release of the KnowBe4 PhishER integration. |