As a part of constructing command configurations, you can configure contexts for where in the ArcSight Console certain commands are available. At the same time, you can define parameters for picking up and passing the value in any selected cell, row, or event field.
For example, you could configure a URL command for a Google search as a right-click command on any cell in an ArcSight Console grid view. By using a parameter as the argument to the search command, you could pick up the text from the selected cell or value from any selected field to use as your search term. (In the Commands editor, all fields, provided as a list of Velocity Expressions, are available for use as command parameters.)
Once configured, integration commands are available on right-click context menus from a variety of contexts including:
Relevant fields in active channels (for example, IP address, host name, MAC address)
Relevant resources (for example, assets)
Active Lists, sessions lists, query viewers and channels
Also, you can configure user login parameters on ArcSight Console users (via a new Integration Parameters tab in the Users resource editor), thereby binding user login information to commands for third-party or ArcSight applications that require secure logins. (See Setting User Login Parameters for more information.)
You can configure a command to prompt for parameter information, which is often useful for login scenarios and as well as others. (See Setting Logins and Other Parameters to Prompt for Values at Runtime for more information.)
To set up command contexts:
Use controls on the Configurations Context tab to add, edit, or remove contexts in a configuration.
Click the fields under Location, Type, Select, and Data Type to get drop-down menus with which to select contexts in the ArcSight Console UI where the command is available and to which selections it applies.
Command Context Attributes |
|
---|---|
Attribute |
Description |
Location |
View where in the ArcSight Console the command is available. For example:
|
Type |
Contexts in the ArcSight Console panels where the command is available. Available types vary depending on the location you choose. For example, if you choose Viewer for the location, you can specify types of “views” where you want the command to display, such as Grid View, Chart View, various List entries, Dashboards, Query Viewers, and so on. |
Selection |
User selection or subset of it that is fed into the command. Options can include All Selections, Selected Cell, Selected Row, Selected Attribute. |
Data Type |
Data type for the parameters fed into the command (derived from the Selection). Options include:
|