Skip to main content

Locate Environment Variables

Before deploying the Cloud Function for Cyware Intel Exchange integration, you need to locate the values for the required environment variables. These variables are used to configure authentication, storage, and ingestion behavior.

  • CHRONICLE_CUSTOMER_ID: This identifies your Google SecOps (Chronicle) customer account. To locate this value, follow these steps:

    1. Log in to the GCP Console.

    2. Go to Security > Google SecOps.

    3. Expand Instance Details.

    4. Copy the Customer ID value.

  • CHRONICLE_REGION: This specifies the Chronicle region for data ingestion. To locate this value, follow these steps:

    1. Log in to the GCP Console.

    2. Go to Security > Google SecOps.

    3. Expand Instance Details.

    4. Copy the Region value.

  • CHRONICLE_PROJECT_NUMBER: Identifies your GCP project for API calls and Cloud Function execution. To locate this value, follow these steps:

    1. Log in to the GCP Console.

    2. On the home page, locate your Project Number.

  • GCP_BUCKET_NAME: Stores Cloud Function ZIP files and checkpoint data. To locate this value, follow these steps:

    1. Log in to the GCP Console.

    2. From the GCP navigation menu, go to Cloud Storage > Buckets.

    3. Copy the bucket name. For example, cyware-bucket.

  • CYWARE_ACCESS_ID, CYWARE_SECRET_KEY, CYWARE_BASE_URL: Used to authenticate the Cloud Function with your Cyware Intel Exchange instance. For more information on locating these, see Configure Rules and API Credentials in Intel Exchange.