The Share Indicators integration is a dedicated integration
that you configure on each tenant account to export its indicators
to the shared index. XSOAR
Use the Share Indicators integration to define
which indicators to export to the shared index.
Access the tenant account for which to share the
indicators.
Go to
Settings
Integrations
Instances
.
Search for
Share Indicators
.
Configure the integration instance.
Parameter
Description
Example
Name
A meaningful name for the integration instance.
indicators-share_domains_ips
Fetch indicators
Make sure you select this option if you want
this integration instance to export indicators to the shared index.
N/A
Fetch interval
How often to fetch indicators from this tenant
and export them to the shared index. You can specify the interval
in days, hours, or minutes.
5 minutes
Indicators Query
The query that defines which indicators to
fetch from the tenant and export to the shared index. The Query
is in Elasticsearch syntax.
type:Domain or type:IP
The tenant’s indicators are exported to the shared index,
at the specified interval, and are available for other tenants to
ingest.
