Integrations enable you to connect with third-party services and provide opportunities for increased automation.
Integrations enable Cortex XDR to connect and communicate with other products.
Integrations are part of content packs. When you adopt a playbook from the Playbook Catalog, the related content pack is automatically downloaded. In some cases, the content pack includes an integration. Content packs containing integrations are also automatically downloaded as you configure playbook tasks that require integration commands.
To use an integration, you must configure an integration instance. This can be done within the playbook workflow or on the Automation and feed integrations page. You can have multiple instances of an integration, for example, to connect to different environments.
On the Automation and feed integrations page, you can do the following:
Option | Description |
|---|---|
Add instance | Configure an integration instance to connect and communicate with other products. For more information, see Add an integration instance. After configuring the instance, you can also enable/disable the integration instance, copy the instance, and view the integration fetch history. |
View integration source | View the integration settings and source code. |
Delete | Although you can't delete an integration installed from a content pack, you can delete an integration instance. |
View integration commands | Below each installed integration, you can click Show commands to view a list of the integration's commands and a description of each command. |
Version history | When you view the source code, you can also see the history of the integration and revert to previous installed versions. |
You can view the version history for all installed integrations (the last 100 changes) by clicking the Version History button at the top of the .