Set up integrations, connectors, and jobs

Supported in:

This document provides the procedures necessary to configure Google Security Operations components to run remotely using the deployed Remote Agent. After the Remote Agent is created, you must explicitly configure integrations, connectors, and jobs to use the new remote infrastructure.

Set up integrations

Configure integrations to let manual and Playbook actions run on cases to execute remotely:

  1. Go to the Content Hub (Marketplace for SOAR only users).
  2. Select the required environment.
  3. Select the required integration and click Configure Integration.
  4. Select Run Remotely and click Save.

You can run actions from this environment remotely, including manual and playbook actions.

Set up connectors

You can assign any number of connectors to a Remote Agent:

  1. Go to SOAR Settings > Ingestion > Connectors.
  2. Click add Create New Connector.
  3. Select Remote Connector.
  4. Click Create.
  5. Select the required environment.
  6. Select the required Remote Agent. The Remote Agent's status appears on the top of the page.

Set up jobs

Before you set up jobs to run on the Remote Agents, complete these prerequisites:

  1. Go to the Integrations Setup page.
  2. Create a new instance configured to run remotely with this Remote Agent.
  3. Go to the Permissions Groups page and make sure you have the required permissions for the Jobs Scheduler page and for Remote Agents.

Configure a remote job

  1. Go to Response > Jobs Scheduler.
  2. Click add Create New Job.
  3. Select Remote Job.
  4. Click Create.
  5. From the menu, select the required Remote Agent. Only agents configured with a remote instance will be available.

    Jobs can access information in all environments.

Jobs can access information in all environments.

Need more help? Get answers from Community members and Google SecOps professionals.