<div><div><style>p { margin: 0; }span.fr-emoticon.fr-emoticon-img { background-repeat: no-repeat !important; font-size: inherit; height: 1em; width: 1em; min-height: 20px; min-width: 20px; display: inline-block; margin: -0.1em 0.1em 0.1em; line-height: 1; vertical-align: middle; } span.fr-emoticon { font-weight: normal; font-family: "Apple Color Emoji", "Segoe UI Emoji", "NotoColorEmoji", "Segoe UI Symbol", "Android Emoji", "EmojiSymbols"; display: inline; line-height: 0; } blockquote { border-left: solid 2px #5e35b1; color: #5e35b1; margin-left:0; padding-left:5px;}blockquote blockquote{ border-color: #00bcd4; color: #00bcd4;}blockquote blockquote blockquote{ border-color: #43a047; color: #43a047;} table.grid{ border-collapse: collapse;} table.grid td, table.grid th { border: 1px solid #ddd;} .fr-fic.fr-dib{ display: block; margin: 5px auto;}.fr-fic.fr-dib.fr-fir{ text-align: right; margin: 5px 0 5px auto;}.fr-fic.fr-dib.fr-fil{ text-align: left; margin: 5px auto 5px 0;}.fr-fic.fr-dii{ float: none; margin: 5px auto;}.fr-fic.fr-dii.fr-fil{ float: left; margin: 5px auto;}.fr-fic.fr-dii.fr-fir{ float: right; margin: 5px auto;}img.fr-dib.fr-fir { margin-right: 0; text-align: right;}img.fr-dib.fr-fil { margin-left: 0; text-align: left;}img.fr-dib { margin: 5px auto; display: block; float: none;}img.fr-bordered { box-sizing: content-box; border: solid 5px #CCC;}img.fr-shadow { box-shadow: 10px 10px 5px 0px #cccccc;}img.fr-rounded { border-radius: 10px; -moz-border-radius: 10px; -webkit-border-radius: 10px; -moz-background-clip: padding; -webkit-background-clip: padding-box; background-clip: padding-box;}</style><p id="isPasted"><span style="font-size: 11pt;"><strong>In this guide we will cover:</strong></span></p><p><span style="font-size: 11pt;"><strong>- What is the XSOAR Integration?</strong></span></p><p><span style="font-size: 11pt;"><strong>- Connecting XSOAR to Halo</strong></span></p><p><span style="font-size: 11pt;"><strong>- User Matching</strong></span></p><p><br></p><p><br></p><p><span style="font-size: 14pt;" id="isPasted"><strong>What is the XSOAR Integration?</strong></span></p><p id="isPasted"><span style="font-size: 11pt;">XSOAR can be integrated with Halo to allow for the creation of tickets in Halo from incidents in XSOAR.</span></p><p><br></p><p><span style="font-size: 14pt;"><strong>Connecting XSOAR to Halo<br></strong></span></p><p><span style="font-size: 11pt;">The integration between Halo and XSOAR is configured mostly in XSOAR.</span></p><p><span style="font-size: 11pt;">The attached Yaml files can be downloaded and used to import the configuration into your XSOAR instance.</span></p><p><br></p><p><span style="font-size: 11pt;"><em><strong>Note: If viewing this guide on our website, please go to the </strong></em></span><span style="font-size: 11pt;"><em><strong><a href="https://support.haloservicedesk.com/kb?id=2056" target="_blank" rel="noopener noreferrer"><strong>support portal</strong></a></strong></em></span><span style="font-size: 11pt;"><em><strong> to download these files.</strong></em></span><strong><em><br></em></strong></p><p><span style="font-size: 11pt;"><br></span></p><p><span style="font-size: 11pt;">Once you've imported the configuration, you then need to add an instance of the HaloITSM integration and enter your Halo URL and the credentials for a Client ID and Secret application created in your Halo. </span></p><p><span style="font-size: 11pt;"><br></span></p><p><span style="font-size: 11pt;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjU4ODE3NmNhLTNhOWItNDgyNi05ZDk3LTgzZGZjYzdkZGE3MiJ9.KfFdkxHgQHLZlPQWyJRNl4eEuTLFASKbFT-gcx2gCbo" width="467" height="559" class="fr-fic fr-dii"></span></p><p><span style="font-size: 10pt;"><strong>Fig 1. XSOAR configuration. </strong></span></p><p><br></p><p><span style="font-size: 11pt;">The imported playbook can be configured to map different fields for ticket creation. The incident ID field should not be changed, but all others can be updated to map the desired information. Additional fields can be added, but this will require adjusting the integration to handle them. </span></p><p><span style="font-size: 11pt;"><br></span></p><p><span style="font-size: 11pt;">The format for the customfields input is the same as when updating customfields via the API e.g.</span></p><p><span style="font-size: 11pt;">[{"id": 123, "value": "My customfield value"}]</span></p><p><span style="font-size: 11pt;"><br></span></p><p><span style="font-size: 11pt;">The default user and ticket type can be specified in Halo</span></p><p><span style="font-size: 11pt;"><br></span></p><p><span style="font-size: 11pt;">Currently, this integration can only be used to create tickets in Halo from XSOAR. However, this functionality will be expanded in the future to allow the synchronisation of updates between the incident in XSOAr and the ticket in Halo.</span></p><p><br></p><p><strong><span style="font-size: 14pt;">User Matching</span></strong></p><p><span style="font-size: 11pt;">If the username field is set during the create ticket command, it will attempt to match to a user in Halo using the username, email, and network login fields. If no user is found, the ticket will be logged under the default User.</span></p></div></div>
