RSA Archer v2

The RSA Archer GRC platform provides a common foundation for managing policies, controls, risks, assessments, and deficiencies across lines of business.

Case Management · RSA Archer

Configuration parameters

  • url — Server URL (required)
  • api_endpoint — API Endpoint
  • instanceName — Instance name (required)
  • credentials — Username (required)
  • userDomain — User domain
  • isFetch — Fetch incidents
  • incidentType — Incident type
  • applicationId — Application ID for fetch (required)
  • applicationDateField — Application date field for fetch (required)
  • fetch_limit — Maximum number of incidents to pull per fetch
  • fetch_time — First fetch timestamp
  • fields_to_fetch — List of fields from the application to get into the incident
  • fetch_xml — XML for fetch filtering
  • timeout — Timeout
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • incidentFetchInterval — Incidents Fetch Interval

Commands (19)

  • archer-create-record

    Creates a new content record in the given application.

  • archer-delete-record

    Deletes an existing content record in the given application.

  • archer-execute-statistic-search-by-report

    Performs a statistic search by report GUID.

  • archer-get-application-fields

    Gets all application fields by application ID.

  • archer-get-field

    Returns a mapping from list value name to list value ID.

  • archer-get-file

    Downloads a file from Archer to Cortex XSOAR context.

  • archer-get-mapping-by-level

    Returns a mapping of fields by level ID.

  • archer-get-record

    Gets information about a content record in the given application.

  • archer-get-reports

    Gets all reports from Archer.

  • archer-get-search-options-by-guid

    Returns search criteria by report GUID.

  • archer-get-valuelist

    Returns a list of values for a specified field, for example, fieldID=16114. This command is applicable only to value list fields (type 4) and will attempt to fetch the list from the internal integration instance cache. To ensure an up-to-date response, execute the `archer-reset-cache` command beforehand to clear the cache and force a new request to the API.

  • archer-list-users

    Gets details for a user or a list of all users.

  • archer-print-cache

    Prints the Archer's integration cache.

  • archer-reset-cache

    Resets Archer's integration cache. Run this command if you change the fields of your Archer application.

  • archer-search-applications

    Gets application details or a list of all applications.

  • archer-search-records

    Searches for records in the given application.

  • archer-search-records-by-report

    Searches records by report GUID.

  • archer-update-record

    Updates an existing content record in the given application.

  • archer-upload-file

    Uploads a file to Archer.