From c9f52242fd48c9fc820a7df18a355b8f04bf20cd Mon Sep 17 00:00:00 2001 From: lcawl Date: Mon, 23 Sep 2024 15:21:58 -0700 Subject: [PATCH 1/3] [DOCS] Add TheHive connector to case settings --- docs/management/cases/manage-cases-settings.asciidoc | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/management/cases/manage-cases-settings.asciidoc b/docs/management/cases/manage-cases-settings.asciidoc index b0764c495101a..4233f3fa0b540 100644 --- a/docs/management/cases/manage-cases-settings.asciidoc +++ b/docs/management/cases/manage-cases-settings.asciidoc @@ -31,6 +31,7 @@ management systems: * {sn-itsm} * {sn-sir} * {swimlane} +* TheHive * {webhook-cm} NOTE: To create connectors and send cases to external systems, you must have the @@ -45,7 +46,7 @@ Alternatively, you can create them in *{stack-manage-app} > Cases > Settings*: . Enter your required settings. Refer to <>, <>, <>, <>, -<>, or <> for connector +<>, <>thehive-action-type>>, or <> for connector configuration details. You can subsequently choose the connector when you create cases and use it in case templates. From d11173f34b7abd755c1fbaa8ae811b7f294de1ad Mon Sep 17 00:00:00 2001 From: Lisa Cawley Date: Tue, 24 Sep 2024 07:15:59 -0700 Subject: [PATCH 2/3] Update docs/management/cases/manage-cases-settings.asciidoc --- docs/management/cases/manage-cases-settings.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/management/cases/manage-cases-settings.asciidoc b/docs/management/cases/manage-cases-settings.asciidoc index 4233f3fa0b540..722748e33ad10 100644 --- a/docs/management/cases/manage-cases-settings.asciidoc +++ b/docs/management/cases/manage-cases-settings.asciidoc @@ -46,7 +46,7 @@ Alternatively, you can create them in *{stack-manage-app} > Cases > Settings*: . Enter your required settings. Refer to <>, <>, <>, <>, -<>, <>thehive-action-type>>, or <> for connector +<>, <>, or <> for connector configuration details. You can subsequently choose the connector when you create cases and use it in case templates. From 76638bfd8a76fbbf72bed60aff55ac7f7e6fc8c2 Mon Sep 17 00:00:00 2001 From: lcawl Date: Thu, 26 Sep 2024 12:53:07 -0700 Subject: [PATCH 3/3] [DOCS] Use TheHive variable --- docs/management/action-types.asciidoc | 4 +-- .../cases/manage-cases-settings.asciidoc | 2 +- .../connectors/action-types/thehive.asciidoc | 34 +++++++++---------- 3 files changed, 20 insertions(+), 20 deletions(-) diff --git a/docs/management/action-types.asciidoc b/docs/management/action-types.asciidoc index a39b5a996dca3..30bf4f791e5d8 100644 --- a/docs/management/action-types.asciidoc +++ b/docs/management/action-types.asciidoc @@ -92,9 +92,9 @@ a| <> | Create an incident in {swimlane}. -a| <> +a| <> -| Create cases and alerts in TheHive. +| Create cases and alerts in {hive}. a| <> diff --git a/docs/management/cases/manage-cases-settings.asciidoc b/docs/management/cases/manage-cases-settings.asciidoc index 722748e33ad10..13079d35a27a0 100644 --- a/docs/management/cases/manage-cases-settings.asciidoc +++ b/docs/management/cases/manage-cases-settings.asciidoc @@ -31,7 +31,7 @@ management systems: * {sn-itsm} * {sn-sir} * {swimlane} -* TheHive +* {hive} * {webhook-cm} NOTE: To create connectors and send cases to external systems, you must have the diff --git a/docs/management/connectors/action-types/thehive.asciidoc b/docs/management/connectors/action-types/thehive.asciidoc index d218833527ee3..e847d0b621eca 100644 --- a/docs/management/connectors/action-types/thehive.asciidoc +++ b/docs/management/connectors/action-types/thehive.asciidoc @@ -1,18 +1,18 @@ [[thehive-action-type]] -== TheHive connector and action +== {hive} connector and action ++++ -TheHive +{hive} ++++ -:frontmatter-description: Add a connector that can create cases and alerts in TheHive. +:frontmatter-description: Add a connector that can create cases and alerts in {hive}. :frontmatter-tags-products: [kibana] :frontmatter-tags-content-type: [how-to] :frontmatter-tags-user-goals: [configure] -TheHive connector uses the https://docs.strangebee.com/thehive/api-docs/[TheHive (v1) REST API] to create cases and alerts. added:[8.16.0] +{hive} connector uses the https://docs.strangebee.com/thehive/api-docs/[{hive} (v1) REST API] to create cases and alerts. added:[8.16.0] [NOTE] ==== -If you use this connector with <>, the status values differ in {kib} and TheHive. +If you use this connector with <>, the status values differ in {kib} and {hive}. The status values are not synchronized when you update a case. ==== @@ -24,19 +24,19 @@ You can create connectors in *{stack-manage-app} > {connectors-ui}* or as needed when you're creating a rule. For example: [role="screenshot"] -image::management/connectors/images/thehive-connector.png[TheHive connector] +image::management/connectors/images/thehive-connector.png[{hive} connector] // NOTE: This is an autogenerated screenshot. Do not edit it directly. [float] [[thehive-connector-configuration]] ==== Connector configuration -TheHive connectors have the following configuration properties: +{hive} connectors have the following configuration properties: Name:: The name of the connector. -Organisation:: The organisation in TheHive that will contain the cases or alerts. -URL:: The instance URL in TheHive. -API key:: The API key for authentication in TheHive. +Organisation:: The organisation in {hive} that will contain the cases or alerts. +URL:: The instance URL in {hive}. +API key:: The API key for authentication in {hive}. [float] [[thehive-action-configuration]] @@ -46,16 +46,16 @@ You can test connectors for creating a case or an alert with the <> to customize connecto [float] [[configure-thehive]] -=== Configure TheHive +=== Configure {hive} -To generate an API key in TheHive: +To generate an API key in {hive}: -1. Log in to your TheHive instance. +1. Log in to your {hive} instance. 2. Open profile tab and select the settings. 3. Go to *API Key*. 4. Click *Create* if no API key has been created previously; otherwise, you can view the API key by clicking on *Reveal*.