You can set up inbound and outbound sync profiles to define field mapping between Cortex XSIAM issues and an external application.
Sync profiles provide a blueprint for how information is exchanged between Cortex XSIAM issues and external applications, by defining field mapping. This ensures that relevant data, such as Status or Description, is accurately transferred and maintains consistency, even if the systems use different terminology.
When you link an issue with an external application (such as Jira), or set up an automation, you can select the sync profile you want to use. Cortex XSIAM provides default outbound and inbound sync profiles, or you can create custom sync profiles as described in the following procedure.
Go to → → → → .
Click New Profile.
Type a profile name and description.
Under Integration, select the external application with which you want to map fields, such as Jira V3 or ServiceNow V2.
Under Sync Direction, select Inbound or Outbound.
If you select Inbound, you will define field mapping from the external application to Cortex XSIAM. If you select Outbound, you will define field mapping from Cortex XSIAM to the external application.
Note
If an issue is using bi-directional syncing, you need to provide both an Inbound and an outbound sync profile.
Under Field Mapping, select a field to map and select the corresponding field. For example, Jira: Priority, Cortex: Severity.
Define one or more values for each field that you want to map.
Note
Blank fields are skipped.
You must define exact values.
Custom status values are not currently supported.
Support is currently limited to a specific set of fields.
Click Save.
Example 115.In this example, the sync profile specifies Inbound mapping from Jira v3 fields to Cortex fields.