CMDB Inbound Integration

CMDB Inbound Integration populates FortiSIEM CMDB from an external CMDB.

Step 1: Create a CMDB Inbound Integration

You must create a CSV file for mapping the contents of the external database to a location on your FortiSIEM Supervisor, which will be periodically updated based on the schedule you set.

1. Log into your Supervisor node with administrator credentials.
2. Go to Admin > Settings > General > External Integration.
3. Click +.
4. For Type, select Device.
5. For Direction, select Inbound.
6. Enter the File Path to the CSV file.
7. For Content Mapping, click the edit icon.
   1. For Column Mapping, click + and enter the mapping between columns in the Source CSV file and the Destination CMDB.
      
      1. Enter Source CSV column Name for Source Column
      2. Check Create Property if it Does not Exist to create the new attribute in FortiSIEM if it does not exist
         1. Enter a name for the Destination Column of the property from the drop-down list.
         2. Select Overwrite Existing Value if the property exists in the CMDB, but you want to overwrite it's current value.
      3. If the property exists in the CMDB, select FortiSIEM CMDB attribute for Destination Column.
      4. Select Overwrite Existing Value if the property exists in the CMDB, but you want to overwrite its current value.
      5. Click OK.
   2. For Data Mapping, click + and enter the mapping between data values in the external system and the destination CMDB.
      For example, if you wanted to change all instances of California in the entries for the State attribute in the external system to CA in the destination CMDB, you would select the State attribute, enter California for From. and CA for To.
8. In Attribute Mapping, map attributes to resources.
9. Click OK.
10. Click Save.

Step 2: Create a CMDB Inbound Integration Schedule

Updating FortiSIEM CMDB on a schedule:

1. Log into your FortiSIEM Supervisor with administrator credentials.
2. Go to Admin > Settings > General > External Integration.
3. Click the Schedule () icon and then click +.
   1. Select the integration policies.
   2. Select a schedule.

Updating FortiSIEM CMDB on-demand (one-time):

1. Log into your FortiSIEM Supervisor with administrator credentials.
2. Go to Admin > Settings > General > External Integration.
3. Select a specific integration policy and click Run.