SolarWinds | Marketplace

Details
Content
Dependencies
Version History

SolarWinds allows users to fetch alerts and events by using the fetch incidents capability and commands.

The SolarWinds integration interacts with the SWIS API to allow users to fetch alerts and events. It also provides commands to retrieve lists of alerts and events.
This integration was integrated and tested with version 3.0.0 of SolarWinds Information Service (SWIS API).

SolarWinds Help

The SolarWinds integration requires installation of SolarWinds Orion Platform which consolidates the full suite of monitoring capabilities into one platform. The following products used in this integration are managed under Orion:

Network Performance Manager
Netflow Traffic Analyzer
Network Configuration Manager
IP Address Manager
Log Analyzer
Server and Application Monitor

How to install SolarWinds Orion Platform

Follow this link to access a comprehensive guide on how to install Orion and the managed products.

SolarWinds Help

Network Performance Manager
Netflow Traffic Analyzer
Network Configuration Manager
IP Address Manager
Log Analyzer
Server and Application Monitor

How to install SolarWinds Orion Platform

Follow this link to access a comprehensive guide on how to install Orion and the managed products.

Classifiers

Name	Description
SolarWinds
SolarWinds Alert - Incoming Mapper	Incoming mapper for SolarWinds Alert
SolarWinds Event - Incoming Mapper	Incoming mapper for SolarWinds Event

Incident Fields

Name	Description
SolarWinds Alert Real Entity Type	Type of the real entity.
SolarWinds Alert Object ID	Object ID of the triggered alert.
SolarWinds Message	Message of a triggered event or alert.
SolarWinds Event Engine ID	Engine ID of a triggered event.
SolarWinds Event NetObject ID	NetObject ID of a triggered event.
SolarWinds Alert Entity URI	URI for the object that triggered the alert.
SolarWinds Event ID	Event ID of the triggered event.
SolarWinds Alert Related Node Caption	Caption of the related node.
SolarWinds Alert Related Node Details URL	URL which contains node details.
SolarWinds Display Name	Display name of the alert or event.
SolarWinds Event NetObject Value	NetObject value of a triggered event.
SolarWinds Alert Acknowledged By	Name of the person who acknowledged the alert.
SolarWinds Alert Acknowledged Date Time	Timestamp at which the alert was acknowledged.
SolarWinds Acknowledged	Whether the alert or event is acknowledged or not.
SolarWinds Alert Reference ID	Unique Identifier of the alert.
SolarWinds Instance Type	Instance type of an event.
SolarWinds Event Type	Name of the type of a triggered event.
SolarWinds URI	URI of the alert.
SolarWinds Alert Entity NetObject ID	NetObject ID of the entity.
SolarWinds Alert Acknowledged Note	Acknowledge note of the alert.
SolarWinds Description	Description of the alert or event.
SolarWinds Instance Site ID	ID of an instance site of which alert or event is triggered.
SolarWinds Alert Note	Note of the alert.
SolarWinds Alert Real Entity URI	URI of the real entity.
SolarWinds Alert Type	Object type of the alert.
SolarWinds Alert Entity Type	Type of the object that triggered the alert.
SolarWinds Event NetObject Type	NetObject type of a triggered event.
SolarWinds Alert ID	ID of the alert.
SolarWinds Alert Related Node ID	ID of the related node.
SolarWinds Alert Created By	Name of the person who created the alert.
SolarWinds Alert Name	Name of the alert.
SolarWinds Active Alert ID	Active ID of the triggered alert.
SolarWinds Alert Entity Details URI	Relative URL for the details view for the triggering object.
SolarWinds Alert Entity Caption	The display name for the triggering object.

Incident Types

Name	Description
SolarWinds Event
SolarWinds Alert

Integrations

Name	Description
SolarWinds	The SolarWinds integration interacts with the SWIS API to allow you to fetch alerts and events. It also provides commands to retrieve lists of alerts and events.

Layouts

Name	Description
SolarWinds Event	SolarWinds Event Layout
SolarWinds Alert	SolarWinds Alert Layout

Classifiers

Name	Description
SolarWinds
SolarWinds Event - Incoming Mapper	Incoming mapper for SolarWinds Event
SolarWinds Alert - Incoming Mapper	Incoming mapper for SolarWinds Alert

Incident Fields

Name	Description
SolarWinds Alert Entity Type	Type of the object that triggered the alert.
SolarWinds Alert Entity Caption	The display name for the triggering object.
SolarWinds Alert Related Node Details URL	URL which contains node details.
SolarWinds Alert Related Node Caption	Caption of the related node.
SolarWinds Alert Related Node ID	ID of the related node.
SolarWinds Alert Entity NetObject ID	NetObject ID of the entity.
SolarWinds Alert Entity Details URI	Relative URL for the details view for the triggering object.
SolarWinds Alert Real Entity URI	URI of the real entity.
SolarWinds Instance Type	Instance type of an event.
SolarWinds Event NetObject ID	NetObject ID of a triggered event.
SolarWinds Event ID	Event ID of the triggered event.
SolarWinds Alert Real Entity Type	Type of the real entity.
SolarWinds Alert Type	Object type of the alert.
SolarWinds Alert Note	Note of the alert.
SolarWinds Alert Created By	Name of the person who created the alert.
SolarWinds Acknowledged	Whether the alert or event is acknowledged or not.
SolarWinds Alert Acknowledged Date Time	Timestamp at which the alert was acknowledged.
SolarWinds Alert Entity URI	URI for the object that triggered the alert.
SolarWinds Event NetObject Value	NetObject value of a triggered event.
SolarWinds Event Engine ID	Engine ID of a triggered event.
SolarWinds Event Type	Name of the type of a triggered event.
SolarWinds Alert ID	ID of the alert.
SolarWinds Display Name	Display name of the alert or event.
SolarWinds Active Alert ID	Active ID of the triggered alert.
SolarWinds Alert Acknowledged By	Name of the person who acknowledged the alert.
SolarWinds Message	Message of a triggered event or alert.
SolarWinds Description	Description of the alert or event.
SolarWinds Alert Reference ID	Unique Identifier of the alert.
SolarWinds Alert Object ID	Object ID of the triggered alert.
SolarWinds Event NetObject Type	NetObject type of a triggered event.
SolarWinds Instance Site ID	ID of an instance site of which alert or event is triggered.
SolarWinds Alert Name	Name of the alert.
SolarWinds URI	URI of the alert.
SolarWinds Alert Acknowledged Note	Acknowledge note of the alert.

Incident Types

Name	Description
SolarWinds Event
SolarWinds Alert

Integrations

Name	Description
SolarWinds	The SolarWinds integration interacts with the SWIS API to allow you to fetch alerts and events. It also provides commands to retrieve lists of alerts and events.

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

Optional Content Packs (7)

Pack Name	Pack By
Common Types	By: Cortex XSOAR
Chronicle	By: Chronicle
NIST	By: Cortex XSOAR
IoT by Palo Alto Networks	By: Cortex XSOAR
Phishing	By: Cortex XSOAR
SANS	By: Cortex XSOAR
ServiceNow	By: Cortex XSOAR

All level dependencies (2)

Pack Name	Pack By
Filters And Transformers	By: Cortex XSOAR
Base	By: Cortex XSOAR

PUBLISHER

Cortex

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	June 8, 2021
Last Release	February 14, 2024

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.