Add a Cloud Feed Integration

After you find your integration, you add an instance for that integration in your environment. You then enter the connection details to enable Cybereason XDR to communicate with the other platform or the on-site collector agent for that integration.

To add cloud-feed integrations, follow these steps:

  1. Perform the required configuration to forward logs from your external platforms. For details on the required configuration for an integration, select your integration the Cybereason Integrations page and then select the Configure tab to view configuration steps for log forwarding.

  2. In the center part of the Connect screen, click the block with your integration. When you select an integration, the Connect screen displays the configuration window with the details required for that integration:

    Add an XDR integration in the Connect screen

    Note

    You can add up to five instances of an specific integration to your Cybereason Connect instance. For example, you can connect up to five different Okta instances to your environment.

  3. Add the necessary configuration or authentication details.

    The required details differ for each integration. For details on the required configuration for your integration, select the integration from the Cybereason Integrations page.

When you enter the configuration information, the Cybereason Connect screen displays the integration in the PENDING status in the My Integrations tab. The integration remains in the PENDING status while the connection is established, then switches to the OK.