Use an Engine in an Integration - User Guide - 2 - Cortex XPANSE - Cortex - Security Operations

When you create an integration instance, you can select whether to fetch alerts and run commands executed for the integration using the engine or a load-balancing group of engines. After you add the engine or load-balancing group to an integration instance, you can run commands using the engine or load-balancing group by specifying the using argument in the Alert War Room.

Command Example

!url url="www.cnn.com" using=urlscan.io_instance_1