Supported Cortex XSOAR versions: 6.8.0 and later.
Palo Alto Networks FireEye HX Event Collector integration for XSIAM.
Navigate to Settings > Configurations > Data Collection > Automation & Feed Integrations.
Search for FireEye HX Event Collector.
Click Add instance to create and configure a new integration instance.
Parameter Description Required Server URL (e.g., https://192.168.0.1:3000) True User Name True Password True Trust any certificate (not secure) False Use system proxy settings False The maximum number of events per fetch. The maximum number of events to fetch every time fetch is executed. False First Fetch Time The First Fetch Time, e.g., 1 hour, 3 days False
Click Test to validate the URLs, token, and connection.
You can execute these commands from the Cortex XSIAM CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.
Manual command to fetch events and display them.
|The maximum number of events to get.
|Occurrence time of the least recent event to include (inclusive). Default is 3 days.
|If true, the command will create events, otherwise it will only display them. Possible values are: true, false. Default is false.
There is no context output for this command.