XSOAR Multi tenant Cortex Data Lake Integration

TaoJinjing — Thu, 18 Apr 2024 19:33:32 GMT

Hi,

I'm checking the manual on how to set up integration between XSOAR and CDL.

If it is a multi-tenant XSOAR environment, what HUB should I go to for set-up(Step1 and Step4)?

For example, I have an XSOAR environment for which I owned the license.

And I want to integrate it with the CDLs of my ClientA and ClientB.

Neither ClientA nor ClientB has the license of XSOAR but they pay us for the SOC service.

To my understanding, I need to go to the HUB of ClientA to set up integration between their CDL and our XSOAR.

In the same way, the setup(Step1 & Step4) needs to be done in the HUB of ClientB in order to link their CDL with our XSOAR.

👆Is that right? Can the setup(Step1 & Step4) be done even if ClientA and ClientB don't have XSOAR licenses?

Otherwise, Step1 & Step4 need to be done in our HUB in which the XSOAR is licensed and included.

Re: XSOAR Multi tenant Cortex Data Lake Integration

sramesh-7 — Wed, 18 Jan 2023 02:49:19 GMT

Hi ,

Yes, you should follow the process to setup the XSOAR app in hub for both clients individually, Not in your hub.

TaoJinjing — Wed, 18 Jan 2023 04:57:19 GMT

Thank you!!