Armis

Use the Armis integration to search alerts and devices, tag and untag devices, and set alert statuses.

Category

Utilities

Pack

Armis

Configuration parameters

• url — Server URL (required)
• isFetch — Fetch incidents
• incidentType — Incident type
• incidentFetchInterval — Incidents Fetch Interval
• max_fetch — Maximum number of incidents per fetch
• alert_status — Fetch alerts with status (UNHANDLED,SUPPRESSED,RESOLVED)
• alert_type — Fetch alerts with type
• min_severity — Minimum severity of alerts to fetch (required)
• first_fetch — First fetch time
• insecure — Trust any certificate (not secure)
• secret — Secret API Key (required)
• free_fetch_string — Fetch Alerts AQL
• proxy — Use system proxy settings

Commands (7)

• armis-search-alerts — Search Armis alerts.
• armis-search-alerts-by-aql-string — Search the alerts with a raw AQL string.
• armis-search-devices — Search devices by identifiers.
• armis-search-devices-by-aql — Search devices with a custom AQL search string.
• armis-tag-device — Add a tag to a device.
• armis-untag-device — Remove a tag from a device.
• armis-update-alert-status — Update the status for an alert.