Kaspersky Unified Monitoring and Analysis Platform

Sending files to NCIRCC

April 8, 2024

ID 243368

If an incident is assigned the More information required status in NCIRCC, you can attach a file to it. The file will be available both in NCIRCC and in the KUMA web interface.

For a hierarchical deployment of KUMA, files can only be uploaded to NCIRCC from the parent KUMA node. At the same time, log entries about the file download are visible in the child nodes of KUMA.

In the incident change log, messages about the files uploaded to NCIRCC by KUMA users are added. Messages about adding files by NCIRCC are not added to the log.

To attach a file to an incident:

  1. In the Incidents section of the KUMA web interface, open the incident you want to attach a file to. The incident must have the More information required status in NCIRCC.
  2. In the NCIRCC integration section of the incident window, select the File tab and click the Send file to NCIRCC button.

    The file selection window opens.

  3. Select the required file no larger than 50 MB and confirm your selection.

The file is attached to the incident and available for both NCIRCC experts and KUMA users.

Data in KUMA and NCIRCC is synchronized every 5-10 minutes.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.