RSA Archer 1.0.0
App Vendor: RSA
App Category: None
Connector Version: 1.0.0
API Version: 1.0.0
About App
RSA Archer is a risk management platform that provides management services of security incidents. The RSA Archer app enables security teams to integrate with the RSA Archer enterprise application.
The RSA Archer app is configured with the Orchestrate application to perform the following actions:
Action Name | Description |
|---|---|
Fetch Application Fields | This action retrieves all fields in the application using application ID. |
Creating Record | This action creates a record. |
Remove Record | This action removes a record using record ID. |
Statistic Search | This action executes a statistic search method. |
Find Group | This action finds the group of an archer instance. |
Fetch Field | This action retrieves the fields from the application. |
Fetch File | This action downloads a file from RSA Archer to Demisto's war room context. |
Fetch Groups | This action retrieves the list of groups of an archer instance. |
Fetch Group ID | This action finds the group ID using group name of an archer instance. |
Get Mapping By Level | This action returns mapping of fields by level ID. |
Fetch Record | This action retrieves information about a content record in the given application. |
Fetch Reports | This action retrieves all the reports from archer. |
Fetch Search Options by GUID | This action returns search criteria by report GUID. |
Fetch All Users | This action retrieves the list of all users of an archer instance. |
Fetch User Details | This action retrieves the user ID of an archer user. |
GRC Add Record ID for Mapping | This action adds record ID to a mapping. |
GRC Mapping Unique Value | This action adds unique value to a mapping. |
GRC Fetch Record | This action retrieves a list of record IDs using unique value. |
GRC Find Endpoint | This action retrieves a list of endpoint URLs. |
GRC Find Endpoint Record | This action retrieves a list of endpoint URL records. |
Fetch Manually Incident | This action retrieves an incident from archer to the war room. |
Search Application | This action searches for an application. |
Search Records | This action searches for records in the given application. |
Search Records By Reports | This action searches records by report GUID. |
Update Record | This action updates a record. |
Upload File | This action uploads a file. |
Configuration Parameters
The following configuration parameters are required for the RSA Archer app to communicate with the RSA Archer enterprise application. The parameters can be configured by creating instances in the app.
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Endpoint URL | Enter the endpoint URL. | Text | Required | |
Instance Name | Enter the instance name. | Text | Required | |
Username | Enter the username. | Text | Required | |
Password | Enter the password. | Password | Required | |
Application Name | Enter the application name. | Text | Optional |
Action: Fetch Application Fields
This action retrieves all fields in the application using application ID.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Application ID | Enter the application ID. | Any | Required |
Action: Creating Record
This action creates a record.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Fields | Enter the fields in JSON format. | Any | Required | |
Record ID | Enter the record ID. | Any | Optional |
Action: Remove Record
This action removes a record using record ID.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Record ID | Enter the record ID. | Any | Required |
Action: Statistic Search
This action executes a statistic search method.
Action Input Parameters
This action does not require any input parameter.
Action: Find Group
This action finds the group of an archer instance.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Group Name | Enter the group name. | Any | Optional |
Action: Fetch Field
This action retrieves the fields from the application.
Action Input Parameters
This action does not require any input parameter.
Action: Fetch File
This action downloads a file from RSA Archer to Demisto's war room context.
Action Input Parameters
This action does not require any input parameter.
Action: Fetch Groups
This action retrieves the list of groups of an archer instance.
Action Input Parameters
This action does not require any input parameter.
Action: Fetch Group ID
This action finds the group ID using group name of an archer instance.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Group Name | Enter the group name. | Any | Required |
Action: Get Mapping By Level
This action returns mapping of fields by level ID.
Action Input Parameters
This action does not require any input parameter.
Action: Fetch Record
This action retrieves information about a content record in the given application.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Record ID | Enter the record ID. | Any | Required |
Action: Fetch Reports
This action retrieves all the reports from archer.
Action Input Parameters
This action does not require any input parameter.
Action: Fetch Search Options by GUID
This action returns search criteria by report GUID.
Action Input Parameters
This action does not require any input parameter.
Action: Fetch All Users
This action retrieves the list of all users of an archer instance.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Query Parameter | Enter the query parameters. | Any | Required |
Action: Fetch User Details
This action retrieves the user ID of an archer user.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
User ID | Enter the user ID. | Any | Optional |
Action: GRC add Record ID for Mapping
This action adds record ID to a mapping.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Key Value Field | Enter the key value field. | Any | Required | |
System ID | Enter the system ID. | Any | Required | |
Prefix | Enter the prefix. | Any | Optional |
Action: GRC Mapping Unique Value
This action adds unique value to a mapping.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Endpoint URL | Enter the endpoint URL. | Any | Required | |
Value Field | Enter the key value field. | Any | Optional | |
Prefix | Enter the prefix value. | Any | Optional |
Action: GRC Fetch Record
This action retrieves a list of record IDs using unique value.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Key Value Field | Enter the key value field. | Any | Required |
Action: GRC Find Endpoint
This action retrieves a list of endpoint URLs.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Application Name | Enter the application name. | Any | Required |
Action: GRC Find Endpoint Record
This action retrieves a list of endpoint URL records.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Endpoint URL | Enter the endpoint URL. | Any | Required |
Action: Fetch Manually Incident
This action retrieves an incident from archer to the war room.
Action Input Parameters
This action does not require any input parameter.
Action: Search Application
This action searches for an application.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Application ID | Enter the application ID. | Any | Required | |
Application Name | Enter the application name. | Any | Required |
Action: Search Records
This action searches for records in the given application.
Action Input Parameters
This action does not require any input parameter.
Action: Search Records By Reports
This action searches records by report GUID.
Action Input Parameters
This action does not require any input parameter.
Action: Update Record
This action updates a record.
Action Input Parameters
This action does not require any input parameter.
Action: Upload File
This action uploads a file.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
File Path | Enter the file name with actual storage path (local or remote). | Any | Required | |
Base64 String Key | Enter the base64 string key value. | Any | Required |