BMC Remedy works also in Enterprise Security?

[jschrem_splunk]

Folks!

Just wonderng if the Add-on for BMC Remedy also works inside the Enterprise Securtiy App?

Thanks for any answer

[rpille_splunk]

You should be able to use it as a possible action when criteria are met for a correlation search -- all alert actions that you have installed should show up there for use in that way. However, you cannot use it for ad hoc invocation from Incident Review at this time, as this alert action is not yet compliant with the adaptive response framework.

[kuja]

It is NOT CIM compliant, so the answer would be no 😞
How would you want it to integrate to ES?

[jschrem_splunk]

Yeah that make sense 😉

The Idea is to have an ES alert action function which creates a ticket in Remedy out of ES.

Thanks