Integrations are installable packages available from the Google Security Operations **Marketplace**. When you install an integration, it adds connectors, playbook actions, and scheduled jobs. This integration lets Google SecOps interact with third-party products to perform security operations tasks.
Connectors: ingest alerts and events from external sources into Google SecOps.
Actions: enrich data and perform tasks like blocking
IP addresses or sending emails.
Jobs scheduler: performs scheduled tasks on third-party
products directly from Google SecOps.
Install an integration
To install an integration, follow these steps:
Go to Marketplace and click the
Integrations tab.
Search for the integration package you want to install.
Click Install.
Configuration
For detailed setup instructions of how to configure each component, refer to the following guides:
After configuring the integration, test it to make sure that all components
work as expected. Refer to the linked guides for any troubleshooting tips
or additional configuration details.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eIntegrations, found in the Google Security Operations Marketplace, enhance functionality by connecting with third-party products, offering connectors, playbook actions, and scheduled jobs.\u003c/p\u003e\n"],["\u003cp\u003eConnectors ingest alerts from external sources, actions perform tasks and enrich data, and the job scheduler automates tasks on third-party products.\u003c/p\u003e\n"],["\u003cp\u003eInstalling an integration is done through the Marketplace by searching for it and then clicking "Install," however, subsequent configuration of connectors, actions, and scheduled jobs are done separately.\u003c/p\u003e\n"],["\u003cp\u003eDetailed configuration guides are available for connectors, playbook actions, and jobs, and testing the integration after configuration is highly advised.\u003c/p\u003e\n"]]],[],null,["# Configure integrations\n======================\n\nSupported in: \nGoogle secops [SOAR](/chronicle/docs/secops/google-secops-soar-toc)\n\n\nIntegrations are installable packages available from the Google Security Operations \\*\\*Marketplace\\*\\*. When you install an integration, it adds connectors, playbook actions, and scheduled jobs. This integration lets Google SecOps interact with third-party products to perform security operations tasks.\n\n- **Connectors**: ingest alerts and events from external sources into Google SecOps.\n- **Actions**: enrich data and perform tasks like blocking IP addresses or sending emails.\n- **Jobs scheduler**: performs scheduled tasks on third-party products directly from Google SecOps.\n\nInstall an integration\n----------------------\n\nTo install an integration, follow these steps:\n\n1. Go to **Marketplace** and click the **Integrations** tab.\n2. Search for the integration package you want to install.\n3. Click **Install**.\n\n| **Note:** After you install the integration, you must **separately** configure the connectors, playbook actions, and scheduled tasks.\n\nConfiguration\n-------------\n\n\nFor detailed setup instructions of how to configure each component, refer to the following guides:\n\n- [Ingest data using SOAR Connectors](/chronicle/docs/soar/ingest/connectors/ingest-your-data-connectors)\n- [Use Actions in Playbooks](/chronicle/docs/soar/respond/working-with-playbooks/using-actions-in-playbooks)\n- [Write Jobs](/chronicle/docs/soar/respond/jobs-scheduler/writing-jobs)\n- [Configure an Instance](/chronicle/docs/soar/respond/integrations-setup/supporting-multiple-instances#configure-an-instance)\n\n\nAfter configuring the integration, test it to make sure that all components\nwork as expected. Refer to the linked guides for any troubleshooting tips\nor additional configuration details.\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]
