For the complete documentation index, see llms.txt. This page is also available as Markdown.
Cortex XSIAM

Use an engine in an integration

Use Cortex XSIAM engines and load-balancing groups to run integration commands and fetch issues.

When you create an integration instance, you can select whether to fetch issues and run commands executed for the integration using the engine or a load-balancing group of engines. After you add the engine or load-balancing group to an integration instance, you can run commands using the engine or load-balancing group by specifying the using argument in the Issues War Room.

Before configuring an integration to run using multiple engines in a load-balancing group, we recommend that you test the integration using a single engine in the load-balancing group.

Long-running integrations should not run on load-balancing groups.

Command Example

!url url="www.cnn.com" using=urlscan.io_instance_1

Last updated

Was this helpful?