Soar integration with Cisco Cloud email Security

[Vishal6]

Hi All,

Can i integrate Logrhythm SOAR with Cisco CES ? If yes please share any relevant document if possible

[iakdag]

Hi Vishal6,

Could you kindly elaborate on the need?

Apart from that, you may leverage the API guide provided below.

https://docs.ces.cisco.com/docs/api

Kind regards,

[Vishal6]

Having Logrhythm soar and wants to integrate with Cisco Ces. As per below link we can integrate to multiple security products but there Ces not mentioned 

https://www.cisco.com/c/en/us/products/security/technical-alliance-partners/logrhythm.html

[Ken Stieers]

Step 1 is getting logs to the SEIM. I couldn't get Logrythm to be clear as to which logs they had good parsers for.

Next is figuring out what "integrate SOAR with CES" actually means for you... there isn't a defined set of capabilities in Logrythm to take specific actions in CES, no "easy setup and now you can right-click/block from the log explorer."

You have to build what you need in Logrhythm based on the available API docs previously shared.