Data Ingestion with FortiSOAR

Which feature in FortiSOAR facilitates data ingestion from external SIEM solutions and other third-party sources?

What are the modes of data ingestion in FortiSOAR?

What is the purpose of the data ingestion wizard in FortiSOAR?

Which mode of data ingestion uses fetch APIs of the integration?

What happens if both notification-based and schedule-based ingestion are configured for the same source?

Which connector has a FortiSOAR add-on that can be installed on the server side to push data to FortiSOAR?

What is the purpose of the Configure Data Ingestion tab in a connector?

FortiSOAR Data Ingestion Features

Data Ingestion from External Sources: FortiSOAR uses connectors to facilitate seamless data ingestion from external SIEM solutions and other third-party sources.
Modes of Data Ingestion: There are multiple modes available, including notification-based ingestion and schedule-based ingestion, allowing flexibility based on use case.
Data Ingestion Wizard Purpose: The wizard simplifies the configuration process for data ingestion, guiding users through the necessary steps to set up the data flow effectively.

Data Ingestion Mechanics

Fetch API Utilization: The fetch mode of data ingestion relies on APIs provided by the integration to retrieve data from the source.
Conflict in Ingestion Modes: If both notification-based and schedule-based ingestion are configured for the same source, there can be a conflict leading to potential data duplication or inconsistency.
FortiSOAR Add-on: The FortiSIEM connector has a dedicated FortiSOAR add-on that can be installed on the server side to actively push data into FortiSOAR.

Connector Configuration

Configure Data Ingestion Tab: This tab within a connector allows for detailed settings and adjustments related to how data is ingested, ensuring that configurations meet specific operational needs.

Test your knowledge on data ingestion with FortiSOAR! Learn about the dedicated data ingestion wizard, scheduling periodic data ingestion, mapping fields between FortiSOAR and data sources, defining content pulling frequency, and using sample playbooks. Challenge yourself and become an expert in data ingestion with FortiSOAR!