This article is relevant for users of both Chronicle SOAR and Chronicle SIEM.

Because rules are stored in different Chronicle instances we need to define the instance URL first before users can jump over to see the UDM search or the rules page in Chronicle SIEM from the Redirect Menu in the top header bar.

To define the URL instance.

  1. Navigate to Settings > Organization > Environments.
  2. Create a new environment or edit an existing environment and enter the required information.
  3. In the URL Instance - enter the base URL of the specific instance in the Chronicle SIEM platform and click Add.
  4. The new environment now appears in the top header bar under both Redirect Menu > UDM Search and Redirect Menu > Rules.