Add an integration instance

Add and configure an integration instance in Cortex XSIAM.

To use a downloaded integration, you must configure an integration instance.

Before you begin:

• Content packs containing integrations are downloaded when you adopt playbooks and configure playbook tasks. The content pack must be downloaded before you can configure an integration instance.

• Consider whether you want to add credentials, which enable you to save login information without exposing usernames, passwords, certificates, and SSH keys. For more information, see Manage credentials.

• Although you can view integration documentation when adding an instance, https://xsoar.pan.dev/ has more detailed information about integrations, including commands, outputs, and recommended permissions.

1

Find the integration

Navigate to Settings → Data Sources & Integrations. Search for the integration.

2

Add an instance

Select the integration and click Add Instance.

3

Configure parameters

Add the required parameters.

4

Test the connection

Optional: Click Test to verify the integration instance works correctly.

5

Save the instance

Click Save & Exit.

You can expand the integration to view instance details. You can also enable, disable, or copy the instance.

If an error occurs, see Troubleshoot integrations.

6

Choose when to use the instance

By default, the instance runs whenever the integration is called. Change Always to On Demand to use it only with the using argument in a playbook or CLI.

For example, use an on-demand instance for manual testing.

7

Configure command access

Optional: See Configure integration permissions to manage access to specific commands.