This section describes integration of KUMA with R-Vision SOAR from the KUMA side.
Integration in KUMA is configured in the web interface under Settings → IRP / SOAR.
To configure integration with R-Vision SOAR:
The list of available secrets will be displayed.
The secret window is displayed.
You can obtain the token in the R-Vision SOAR web interface under Settings → General → API.
The R-Vision SOAR API token is now saved and can be used in other KUMA resources.
The window containing R-Vision SOAR integration settings opens.
You can create a new secret by clicking the button with the plus sign. The created secret will be saved in the Resources → Secrets section.
In KUMA integration with R-Vision SOAR is now configured. If integration is also configured in R-Vision SOAR, when alerts appear in KUMA, information about those alerts will be sent to R-Vision SOAR to create an incident. The Details on alert section in the KUMA web interface displays a link to R-Vision SOAR.
If you are working with multiple tenants and want to integrate with R-Vision SOAR, the names of tenants must match the abbreviated names of companies in R-Vision SOAR.
Page top