Import RiskSense Events

To import RiskSense events, set the RiskSense Integration Schedule.

To import RiskSense events:

1.Open the Integration Tools workspace.

See About Configuring Data Integration.

a.

For the integration type, use Web Service.

b.

See Working with Incoming Web Service Connections.

c.

Edit the RiskSense Integration.

d.

On the Integration Details page, select Next.

e.

On the Integration Script page, edit the API Call Settings to add the RiskSense API URL and the API Key.

RiskSense API Settings

f.

Select Next.

g.

In the Schedule Settings window, select Next.

h.

Create a schedule to import these events on a regular basis. See Creating a Schedule in About the Schedule Entry and Scheduled Jobs Workspaces.

i.

Select Yes in the Confirmation window.

j.

On the Review and Publish page, select Publish.

k.

Select OK on the Data Import confirmation window.

2.Open the Integration Queue workspace.

See Viewing the Integration Status and History.

a.

Select Refresh to see the running RiskSense Integration. You may need to do this several times.

b.

You can also open the Integration History workspace to verify the Integration has finished running.

c.

If the import fails, open the Integration Log workspace to check for Error Stats.

If the import fails, on the Integration Script page, try changing the date format to MM/DD/YYYY.

RiskSense Date Format

3.To view the imported events, open the Events workspace.

When a Security Event is imported from RiskSense, an Incident is automatically created.