CloudSOC events are not displayed in the ICA console

Products

• Information Centric Analytics
• Data Loss Prevention Core Package

Issue/Introduction

After creating the CloudSOCDW and configuring the JsonImporter to pull events from CloudSOC, no CloudSOC events are displayed in the ICA console.

Environment

Release : 6.5.4

Component : CloudSOC Import Utility

Cause

The CloudSOC integration procedure provided in the Integration and Solution Guide directs the administrator performing the integration to execute the stored procedure spIW_UnattendedInstallCloudSOC and provides a list of parameters to pass as part of the statement. Some of these parameters are unnecessary and may cause the statement to fail.

Resolution

To complete the CloudSOC integration, replace the example statement provided under Configuring the Integration Wizard Components in the Integration and Solution Guide with the following:

USE RiskFabric;
GO
EXEC spIW_UnattendedInstallCloudSOC
  @i_bUpdateExisting = 1,
  @i_sLinkedServerDataSource = '<CloudSOCDW_hostname>'
  @i_sLinkedServerCatalog = 'CloudSOCDW',
  @i_nJobIntervalMinutes = 60,
  @i_bRunDataSourceQueries = 1
;