Thank you for your feedback.
Form temporarily unavailable. Please try again or contact docfeedback@servicenow.com to submit your comments.

Activate and configure Intel McAfee ESM - Incident Enrichment integration

Log in to subscribe to topics and get notified when content changes.

Activate and configure Intel McAfee ESM - Incident Enrichment integration

The Integration Configuration feature allows you to quickly activate and set up third-party security integrations, including Intel McAfee ESM - Incident Enrichment integration.

Before you begin

Role required: sn_si_admin
Note: This procedure can be used to activate the plugin and configure the integration. You can also activate the plugin using the traditional method.

About this task

Procedure

  1. Navigate to Security Operations > Integrations > Integration Configuration.
    The available security integrations appear as a series of cards.
    Intel McAfee ESM - Incident Enrichment integration card
  2. Click Configure.
  3. Enter the McAfee ESM API Base URL you acquired from the Intel McAfee ESM site.
  4. [Optional] Enter the Link URL - links to a McAfee web interface, when available.
  5. Enter your Intel McAfee ESM Username
  6. Enter your Intel McAfee ESM Password
  7. Enter the Max Rows - the maximum number of rows you want to search.
  8. Enter the Earliest Result (days) - the earliest results you want to see in number of days.
    Note: Configuring this integration activates workflows. To manage the workflows, go to the Workflow Editor.
  9. Click Submit.
    You are returned to Security Integrations screen. You are ready to use the Intel McAfee ESM - Incident Enrichment integration.
Feedback