Administration Guide › Integrations and Connectors › How to Create an Integration

How to Create an Integration

You can use the integration wizard to create or edit integrations, which serve as templates for the configured connectors that gather or receive events from your environment.

You can create integrations of several types, including WMI and ODBC integrations, which actively gather events of their specified type. You can also create syslog integrations, which receive events passively. Syslog integrations can receive events from more than one source. Therefore the process of creating a syslog integration and connector is slightly different.

To take full advantage of this advanced feature, you need a thorough understanding of the event sources in your environment and their communication types. In addition, you need a thorough understanding of regular expression syntax, the CEG, DM and XMP files, and how they parse events.

Creating an integration includes the following steps:

1. Opening the integration wizard.
2. Adding integration components.
3. Selecting suppression rules.
4. Selecting summarization rules.
5. Setting default configurations. This step does not apply for syslog integrations.

You can also create a custom user integration by copying a subscription integration.

More information:

Add Integration Components

Apply Suppression and Summarization Rules

Set Default Configurations