Forward ICDx events to IBM Resilient

book

Article ID: 179392

calendar_today

Updated On:

Products

ICDx

Issue/Introduction

 

Resolution

GOAL: Forward events from Integrated Cyber Defense eXchange (ICDx) to IBM Resilient.

 

Steps:

  1. In ICDx UI, on Configuration> Forwarders, add an AMQP forwarder which points to the IBM Resilient instance.
  2. On Settings> API Keys, create an API Key.
  3. From IBM, download and install the Symantec ICDx Content Pack For Resilient, here:
    https://exchange.xforce.ibmcloud.com/hub/extension/811158e63308075ba4d4e19c779e8cfe
     
  4. Install the ICDx Content Pack for Resilient into Resilient

 

NOTE: Reaching this resource may require an IBMid.