Onboarding Data Sources

Onboarded data sources can be viewed directly in the XSIAM Command Center, providing a clear snapshot of what's connected, the volume of data being ingested and the overall health of each source. This visibility ensures your detection and response capabilities are built on a solid foundation of comprehensive, reliable data.

Adding a data source in the XSIAM is easy—simply filter by use cases or categories to quickly find and select the data source you need. The streamlined onboarding process helps you integrate new data with minimal effort, accelerating time-to-value for your SIEM.

Hover over any data source to view details about its available integrations. Data sources come from the Cortex Marketplace, custom collectors and direct integrations, giving you a broad range of options to connect and expand your telemetry coverage.

In this example, let's connect to Jira—a data source that comes with built-in components such as a data model rule, automation scripts and parsing rules. These prepackaged elements simplify the integration process and ensure that Jira data is normalized, enriched and ready for use across detection, automation, and investigation workflows.

As you add a new data source, you'll see view-only items and customizable options.

• Classifiers & mappers
• Data Normalization: Parsing rules and data models
• Automation: Playbooks and scripts included in the pack, with recommended options selected

Once you've explored the built-in components, it's time to connect your new data source and test the configuration. The Onboarder will guide you through a simplified integration setup page, automatically installing the required Marketplace packs and recommending additional content tailored to the selected data source—making the process fast, intuitive and efficient.