Creating Jobs Using TC Exchange Apps

Minimum Role: Organization role of Organization Administrator

Prerequisites: An App for which a Job can be created installed by a System Administrator via TC Exchange

Overview

ThreatConnect^® is integrated with many third-party applications and services, such as Lastline^®, OpenDNS^®, and ArcSight^™. You can utilize these product integrations as Apps via TC Exchange^™ to further augment their analytic capabilities.

Creating a Job Using a TC Exchange App

1. Log into ThreatConnect with an Organization Administrator account.
2. On the top navigation bar, hover the cursor over Settings and select Org Settings. The Membership tab of the Organization Settings screen will be displayed.
3. Click the Apps tab. The Jobs view of the Apps screen will be displayed (Figure 1).

   

    

4. To create a new Job, click the plus icon at the top right of the table. The Program screen of the Add Job drawer will be displayed (Figure 2).

   

    

   • Job Name: Enter a name for the Job.
   • Run Program: Select the App for which the Job will be created.
   • Click the NEXT button.
5. The Parameters screen of the Add Job drawer will be displayed (Figure 3).

   

    

   • Configure the parameters for the selected App. The parameters differ for each App. For example, the parameters displayed in Figure 3 are for the Auto Enrich 2.0.x App.
   • Click the vertical ellipsis to the right of a field to display a dropdown menu containing variables that you can select to fill in the field.
   • Click the NEXT button.
6. The Schedule screen of the Add Job drawer will be displayed (Figure 4).

   

    

   • Schedule: Select the frequency of Job runs.
   • At: Select this option to schedule a specific time for Job runs, and use the corresponding field to enter the Job run time.
   • Every: Select this option to schedule Job runs to occur at intervals, and use the corresponding fields to set the specific frequency and interval.
   • Click the NEXT button.
7. The Output screen of the Add Job drawer will be displayed (Figure 5).

    

   • Enable Notifications: Select this checkbox to enable notifications on the results of Job runs. If this checkbox is not selected, none of the other options in this step will be available.
   • Email Address: Enter the email address to which notifications should be sent.
   • Notify on Job Result: Select the checkbox(es) for the type(s) of Job results for which notification emails will be sent.
   • Attachments: Select the Include Log Files checkbox to include log files in notification emails.
   • Click the SAVE button.
8. The Jobs view on the Apps screen will now show the Job (Demo Job in this example) created for the selected App. Toggle the switch in the Active column for the Job on to activate the Job (Figure 6).

   

    

ThreatConnect^® is a registered trademark of ThreatConnect, Inc.
TC Exchange™ is a trademark of ThreatConnect, Inc.
OpenDNS^® is a registered trademark of Cisco Systems, Inc.
ArcSight™ is a trademark of Hewlett-Packard Development Company, L.P.
Lastline^® is a registered trademark of Lastline, Inc.

20038-01 v.08.D