Skip to main content
Ctrl+K
Logo image Logo image

EclecticIQ Intelligence Center 2.14.2

Site Navigation

  • Install Configure Upgrade
  • Get to know EclecticIQ Intelligence Center
  • Work with intelligence
  • Integrations
  • Release notes

Section Navigation

  • EclecticIQ Integrations Life Cycle Policy
  • Extensions
    • Enrichers
      • About enrichers
      • Configure enrichers
      • Run enrichers
      • Rules for enrichers
      • Saving data
    • Incoming Feeds
      • Access incoming feeds
      • Create and configure incoming feeds
      • Start and stop incoming feeds
      • Reingest incoming feeds
      • Delete incoming feed content and configuration
    • Outgoing feeds
      • About outgoing feeds
      • Access outgoing feeds
      • Configure content types
      • Download outgoing feed created packages
      • Create and configure outgoing feeds
      • Start and stop outgoing feeds
  • Apps
    • About apps
    • Arcsight
      • About the Arcsight integration
      • Get data from IC to Arcsight
        • Installation of Smart Connector(s)
        • Configure Intelligence Center
        • Import the EclecticIQ base content package in ESM
        • Incoming events
        • EclecticIQ Platform connector field mappings
      • Create sightings and lookups from ArcSight to IC
        • CounterACT connector installation and configuration
        • Create Entity Command
    • Exchange data between IC instances
      • Exchanging data between IC instances
      • Create an automation role
      • Create an automation user
      • Create an automation group
      • Create a TAXII outgoing feed
      • Create a TAXII incoming feed
      • About ingestion discrepancies
    • IBM Resilient
      • About the IBM Resilient integration
      • Before you start with IBM Resilient
      • Install EclecticIQ Platform Integration
      • Configure Intelligence Center Integration
      • Bootstrap Intelligence Center Integration
      • Run resilient-circuits as a service
      • Configure manual sighting creation
      • Manually create sightings
      • Create artifacts and search for matches
      • Upgrade EclecticIQ Platform Integration
      • Uninstall EclecticIQ Platform Integration
      • Release notes - IBM Resilient integration
        • Release notes - IBM Resilient integration 1.1.5
        • Release notes - IBM Resilient integration 1.1.3
        • Release notes - IBM Resilient integration 1.1.2
        • Release notes - IBM Resilient integration 1.0.3
    • IBM QRadar (Legacy)
      • Release notes - IBM QRadar integration
        • Release notes - IBM QRadar integration 1.3.2
        • Release notes - IBM QRadar integration 1.3.3
        • Release notes - IBM QRadar integration 1.3.4
        • Release notes - IBM QRadar integration 1.3.5
      • About the Threat Intelligence EclecticIQ Platform App for IBM QRadar
      • Install and Configure the app on QRadar
      • Upgrade the app on QRadar
      • Configure the QRadar app for Fusion Center
      • Work with the app on QRadar
    • Integrate with MISP
      • About MISP Integration
      • Incoming feed MISP
      • Outgoing Intelligence Center MISP feed
    • Splunk (Legacy)
      • About the Splunk integration
      • Get started with the Splunk integration
      • Work with EclecticIQ Fusion Center and Splunk
      • Work with the EclecticIQ Platform App for Splunk
      • Work with Splunk Enterprise Security
      • Release notes - Splunk integration
        • Release notes - Splunk integration 2.3.1
        • Release notes - Splunk integration 2.4.0
        • Release notes - Splunk integration 2.5.0
        • Release notes - Splunk integration 2.5.1
        • Release notes - Splunk integration 2.5.2
        • Release notes - Splunk integration 2.5.3
        • Release notes - Splunk integration 2.5.4
        • Release notes - Splunk integration 2.5.5
    • Splunk Phantom (Legacy)
      • Get started with the Splunk Phantom integration
      • Release notes - Splunk Phantom integration
  • EclecticIQ Browser Extension
    • Getting started
    • Find ingested entities
    • Manage observables and entities
    • Manage existing observables and entities
    • Regular expressions for extracting observables

Create sightings and lookups from ArcSight to IC#

  • CounterACT connector installation and configuration
  • Create Entity Command

previous

EclecticIQ Platform connector field mappings

next

CounterACT connector installation and configuration