Configure Integrations (Community)
Quick Summary
Integrations are packages that can be installed from the Marketplace. When you install an integration, you are adding Connectors, Playbook Actions and Scheduled Jobs. These are all able to connect Siemplify with third party products in order to perform tasks. Each of these items can be configured from the relevant screen (Connectors, Playbooks, Jobs).
Overview
Each integration has multiple types of items that are relevant for different
use cases.
The Connectors help you ingest alerts into Chronicle SOAR.
The
Actions are used to enrich existing data and perform proactive actions (e.g.
block IP, send email).
The Jobs help users perform scheduled tasks on the
3rd party product directly from Chronicle SOAR.
To use an Integration the user has to locate it in the Marketplace, download it and then configure and test it. In addition, users should configure the specific Connector, Action or Job from the integration they would like to run.
The Connectors are configured from > Connectors. The Jobs are configured from > Jobs. The Integrations are configured from > Integrations. Actions can be either used in playbooks (dragging Actions to playbooks) or directly on Alerts.
Example
Let’s configure an Email integration.
-
First, navigate to Marketplace > Integrations, locate the Emailv2
integration and click the arrow to install it.
- Next, select the gear icon to open up the Configure an Instance screen. Make sure to fill in all the required parameters. If you would like to configure the integration to a different instance (not the default environment) click on the gear icon in the main screen, select Integrations, and configure the integration under the relevant instance.
- Click on Test (after saving it) which will query back and tell you whether the integration is able to communicate successfully with the product or not.