Incident Management Config: Step 1. Add Service

Document created by RSA Information Design and Development Employee on Nov 23, 2016
Version 1Show Document
  • View in full screen mode

This topic provides information on how to add the Incident Management service on a host.


Ensure that you have installed a host on which you want to run the Incident Management service. Refer to Step 1: Add or Update a Host in the Hosts and Services Getting Started Guide for the procedure to add a host.


To add the Incident Management service:

  1. In the Security Analytics menu, select Administration > Services.

    The services view is displayed.

  2. In the Services panel, select  > Incident Management.

    The Add Service dialog is displayed.


  3. Provide the following details:

    HostSelect the host on which the IM server is installed.
    NameType a name for the service.
    PortDefault port is 50040.

    Select SSL if you want Security Analytics to communicate with the host using SSL. The security of data transmission is managed by encrypting information and providing authentication with SSL certificates. This is required by default.

    Note: If you select SSL, ensure SSL is enabled in the System Configuration panel.

    UsernameType the username of the host.
    PasswordType the password of the host.
  4. Click Test Connection to determine if Security Analytics connects to the service.
  5. When the result is successful, click Save.

    The added service is now displayed in the services panel.

Note: If the test is unsuccessful, edit the service information and retry.

You are here
Table of Contents > Configure Incident Management > Step 1. Add Incident Management Service