Incident Management Config: Step 1. Add Service

Document created by RSA Information Design and Development on May 10, 2016
Version 1Show Document
  • View in full screen mode
 
  

This topic provides information on how to add the Incident Management service on a host.

Prerequisites

Ensure that you have installed a host on which you want to run the Incident Management service. Refer to Step 1: Add or Update a Host in the Hosts and Services Getting Started Guide for the procedure to add a host.

Procedure

To add the Incident Management service:

  1. In the Security Analytics menu, select Administration > Services.

    The services view is displayed.

  2. In the Services panel, select  > Incident Management.

    The Add Service dialog is displayed.

    add_im_service_dialog.png

  3. Provide the following details:

                                        
    FieldDescription
    HostSelect the host on which the IM server is installed.
    NameType a name for the service.
    PortDefault port is 50040.
    SSL

    Select SSL if you want Security Analytics to communicate with the host using SSL. The security of data transmission is managed by encrypting information and providing authentication with SSL certificates. This is required by default.

    Note: If you select SSL, ensure SSL is enabled in the System Configuration panel.

    UsernameType the username of the host.
    PasswordType the password of the host.
  4. Click Test Connection to determine if Security Analytics connects to the service.
  5. When the result is successful, click Save.

    The added service is now displayed in the services panel.

Note: If the test is unsuccessful, edit the service information and retry.

You are here: Configure Incident Management > Step 1. Add Incident Management Service

Attachments

    Outcomes