Manage instances

In Cortex XSIAM, you can manage the instances configured for a data source on the Data Sources & Integrations page. You can edit, delete, enable, or disable instances, and refresh log data.

  1. Navigate to Settings → Data Sources & Integrations.
  2. Find an integration by clicking on a data source name in the table or filtering for it, then select the data source.
  3. Right click the relevant instance. From the menu, you can perform actions such as:
    • Enable or disable an Instance.
    • Refresh log data (by selecting Refresh).
    • Edit the instance.
    • Delete the instance.

      If you delete all the instances for a Data Source, the Data Source is not listed on the Data Sources & Integrations page.