Configuring ESM as an Integration

ESM must be configured in SOAR as an integration for executing SOAR actions and enrichment capabilities.

To configure ESM as an integration:

1. In SOAR, navigate to Configuration > Integrations.

2. Click Create Integration to view the Configuration window.

3. Specify the following values in the Configuration window:

   • Name: <Display name of the ESM integration in SOAR>

   • Type: Micro Focus ArcSight ESM

   • Address: <Address of the ESM Manager>

     For example, https://192.168.5.5:8443

   • Configuration: #proxy.id=5422

   • Credential: <Name of the credential set created>

     For example, ArcSight ESM Credentials

   • Trust Invalid SSL Certificates: <Select this option if the server certificate is self-signed or not recognized by the browsers>

   • Require Approval From: <Select users that can provide approval before executing actions on this integration>

   • Notify: <Select users to be notified when SOAR performs an action on this integration>

4. Click Save to complete the integration.

5. Click Test to test the integration. A Test Alert Source pop-up is displayed to confirm that you have entered the valid credentials and address.