XSOAR Multi tenant Cortex Data Lake Integration

[TaoJinjing]

Hi,

I'm checking the manual on how to set up integration between XSOAR and CDL.

https://xsoar.pan.dev/docs/reference/integrations/cortex-data-lake

If it is a multi-tenant XSOAR environment, what HUB should I go to for set-up(Step1 and Step4)?

For example, I have an XSOAR environment for which I owned the license.

And I want to integrate it with the CDLs of my ClientA and ClientB.

Neither ClientA nor ClientB has the license of XSOAR but they pay us for the SOC service.

To my understanding, I need to go to the HUB of ClientA to set up integration between their CDL and our XSOAR.

In the same way, the setup(Step1 & Step4) needs to be done in the HUB of ClientB in order to link their CDL with our XSOAR.

👆Is that right? Can the setup(Step1 & Step4) be done even if ClientA and ClientB don't have XSOAR licenses?

Otherwise, Step1 & Step4 need to be done in our HUB in which the XSOAR is licensed and included.

Cortex XSOAR Cortex Data Lake

[sramesh-7 · Accepted solution]

Hi , 

Yes, you should follow the process to setup the XSOAR app in hub for both clients individually, Not in your hub.

[TaoJinjing]

Thank you!!