Integrations

In this section, we will introduce the following concepts:

📄️ Configuring a ThreatQ Source in CSE

This topic has information about configuring a ThreatQ source in CSE.

📄️ Forward CSE Data to Sumo Logic Platform

The information in this topic applies to CSE users whose portal URL ends in jask.ai. If your portal URL ends in sumologic.com, see Forward CSE Signals to Sumo Logic.

📄️ Forward CSE Signals to Sumo Logic

The information in this topic applies to CSE users whose portal URL ends in sumologic.com. If your portal URL ends in jask.ai, see Forward CSE Data to Sumo Logic.

📄️ Insight Enrichment Server

The CSE Insight Enrichment Server is a component that automatically enriches CSE Insights.

📄️ Integrate CSE with a TAXII Feed

This topic has instructions for integrating CSE with a TAXII threat intelligence feed. In this configuration, CSE is a TAXII client, and polls a TAXII Server.

📄️ Security Incident Response (SIR) Integration

This page has instructions for installing and configuring the integration between Sumo Logic CSE and ServiceNow's Security Incident Response (SIR).