SolarWinds | Marketplace

Details
Content
Dependencies
Version History

SolarWinds allows users to fetch alerts and events by using the fetch incidents capability and commands.

The SolarWinds integration interacts with the SWIS API to allow users to fetch alerts and events. It also provides commands to retrieve lists of alerts and events.
This integration was integrated and tested with version 3.0.0 of SolarWinds Information Service (SWIS API).

SolarWinds Help

The SolarWinds integration requires installation of SolarWinds Orion Platform which consolidates the full suite of monitoring capabilities into one platform. The following products used in this integration are managed under Orion:

Network Performance Manager
Netflow Traffic Analyzer
Network Configuration Manager
IP Address Manager
Log Analyzer
Server and Application Monitor

How to install SolarWinds Orion Platform

Follow this link to access a comprehensive guide on how to install Orion and the managed products.

SolarWinds Help

Network Performance Manager
Netflow Traffic Analyzer
Network Configuration Manager
IP Address Manager
Log Analyzer
Server and Application Monitor

How to install SolarWinds Orion Platform

Follow this link to access a comprehensive guide on how to install Orion and the managed products.

Classifiers

Name	Description
SolarWinds
SolarWinds Event - Incoming Mapper	Incoming mapper for SolarWinds Event
SolarWinds Alert - Incoming Mapper	Incoming mapper for SolarWinds Alert

Incident Fields

Name	Description
SolarWinds Alert Object ID	Object ID of the triggered alert.
SolarWinds Alert Real Entity Type	Type of the real entity.
SolarWinds Alert Acknowledged Note	Acknowledge note of the alert.
SolarWinds Alert Name	Name of the alert.
SolarWinds URI	URI of the alert.
SolarWinds Alert Related Node Caption	Caption of the related node.
SolarWinds Alert Acknowledged Date Time	Timestamp at which the alert was acknowledged.
SolarWinds Active Alert ID	Active ID of the triggered alert.
SolarWinds Alert Related Node Details URL	URL which contains node details.
SolarWinds Alert ID	ID of the alert.
SolarWinds Alert Entity Caption	The display name for the triggering object.
SolarWinds Event Type	Name of the type of a triggered event.
SolarWinds Event ID	Event ID of the triggered event.
SolarWinds Event NetObject Type	NetObject type of a triggered event.
SolarWinds Alert Created By	Name of the person who created the alert.
SolarWinds Event NetObject ID	NetObject ID of a triggered event.
SolarWinds Alert Related Node ID	ID of the related node.
SolarWinds Event Engine ID	Engine ID of a triggered event.
SolarWinds Alert Entity NetObject ID	NetObject ID of the entity.
SolarWinds Description	Description of the alert or event.
SolarWinds Alert Real Entity URI	URI of the real entity.
SolarWinds Alert Entity URI	URI for the object that triggered the alert.
SolarWinds Alert Entity Type	Type of the object that triggered the alert.
SolarWinds Alert Reference ID	Unique Identifier of the alert.
SolarWinds Alert Acknowledged By	Name of the person who acknowledged the alert.
SolarWinds Alert Note	Note of the alert.
SolarWinds Acknowledged	Whether the alert or event is acknowledged or not.
SolarWinds Display Name	Display name of the alert or event.
SolarWinds Instance Type	Instance type of an event.
SolarWinds Message	Message of a triggered event or alert.
SolarWinds Alert Type	Object type of the alert.
SolarWinds Alert Entity Details URI	Relative URL for the details view for the triggering object.
SolarWinds Event NetObject Value	NetObject value of a triggered event.
SolarWinds Instance Site ID	ID of an instance site of which alert or event is triggered.

Incident Types

Name	Description
SolarWinds Event
SolarWinds Alert

Integrations

Name	Description
SolarWinds	The SolarWinds integration interacts with the SWIS API to allow you to fetch alerts and events. It also provides commands to retrieve lists of alerts and events.

Layouts

Name	Description
SolarWinds Event	SolarWinds Event Layout
SolarWinds Alert	SolarWinds Alert Layout

Classifiers

Name	Description
SolarWinds
SolarWinds Alert - Incoming Mapper	Incoming mapper for SolarWinds Alert
SolarWinds Event - Incoming Mapper	Incoming mapper for SolarWinds Event

Incident Fields

Name	Description
SolarWinds Alert Real Entity Type	Type of the real entity.
SolarWinds Message	Message of a triggered event or alert.
SolarWinds Active Alert ID	Active ID of the triggered alert.
SolarWinds Alert Object ID	Object ID of the triggered alert.
SolarWinds Alert ID	ID of the alert.
SolarWinds Alert Related Node ID	ID of the related node.
SolarWinds Alert Reference ID	Unique Identifier of the alert.
SolarWinds Event NetObject ID	NetObject ID of a triggered event.
SolarWinds Instance Site ID	ID of an instance site of which alert or event is triggered.
SolarWinds Alert Acknowledged Date Time	Timestamp at which the alert was acknowledged.
SolarWinds Instance Type	Instance type of an event.
SolarWinds Alert Acknowledged Note	Acknowledge note of the alert.
SolarWinds Event NetObject Type	NetObject type of a triggered event.
SolarWinds Description	Description of the alert or event.
SolarWinds Alert Entity NetObject ID	NetObject ID of the entity.
SolarWinds Event NetObject Value	NetObject value of a triggered event.
SolarWinds Alert Entity Type	Type of the object that triggered the alert.
SolarWinds Alert Related Node Caption	Caption of the related node.
SolarWinds Alert Created By	Name of the person who created the alert.
SolarWinds Event ID	Event ID of the triggered event.
SolarWinds Alert Entity Details URI	Relative URL for the details view for the triggering object.
SolarWinds URI	URI of the alert.
SolarWinds Acknowledged	Whether the alert or event is acknowledged or not.
SolarWinds Alert Entity Caption	The display name for the triggering object.
SolarWinds Alert Real Entity URI	URI of the real entity.
SolarWinds Alert Name	Name of the alert.
SolarWinds Event Type	Name of the type of a triggered event.
SolarWinds Alert Entity URI	URI for the object that triggered the alert.
SolarWinds Event Engine ID	Engine ID of a triggered event.
SolarWinds Alert Acknowledged By	Name of the person who acknowledged the alert.
SolarWinds Alert Related Node Details URL	URL which contains node details.
SolarWinds Alert Note	Note of the alert.
SolarWinds Alert Type	Object type of the alert.
SolarWinds Display Name	Display name of the alert or event.

Incident Types

Name	Description
SolarWinds Event
SolarWinds Alert

Integrations

Name	Description
SolarWinds	The SolarWinds integration interacts with the SWIS API to allow you to fetch alerts and events. It also provides commands to retrieve lists of alerts and events.

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

Optional Content Packs (7)

Pack Name	Pack By
Common Types	By: Cortex XSOAR
Google SecOps	By: Google
NIST	By: Cortex XSOAR
IoT by Palo Alto Networks	By: Cortex XSOAR
Phishing	By: Cortex XSOAR
SANS	By: Cortex XSOAR
ServiceNow	By: Cortex XSOAR

All level dependencies (3)

Pack Name	Pack By
Aggregated Scripts	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR
Base	By: Cortex XSOAR

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	June 8, 2021
Last Release	March 22, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.