TheHive | Configure | Analyzer

1. In Cortex, select the Organization tab.

2. Select the Analyzers tab.

3. Query for “EclecticIQ_SearchObservable_2_0”.

4. For the EclecticIQ_SearchObservable_2_0 responder, select + Enable.

5. Enter:

   • a readable name to recognize your analyzer instance by.

   • the url for your EclecticIQ Intelligence Center instance.

   • your EclecticIQ Intelligence Center API token.
     See our documentation on creating API tokens for more information.

6. Select Save.

You can now use the EclecticIQ Analyzer for TheHive or configure the EclecticIQ Responder for TheHive if you haven’t yet.