Editing Chronicle SecOps Instance Details

Introduction

After setting up a Chronicle instance in Resolution Intelligence Cloud™, there are scenarios where you may need to update your Chronicle instance details—such as replacing an expired key, adding new functionality, or integrating additional security modules. This guide explains how to access your instance configuration within Resolution Intelligence Cloud™ and make necessary adjustments.

Editing Chronicle Instance Details

Follow these steps to replace existing keys or upload new Chronicle keys:

Steps to Replace or Upload New Keys

1. Access Configurations:
   • Click the gear icon at the top of the screen
2. Navigate to Integrations:
   • Under Data Ingestion in the left menu, select Integrations. 
   • Find the Chronicle tile and click on it to access the Chronicle integration settings.
3. Go to Chronicle Instance Details:
   • On the Configurations page, click on Chronicle Instance Setup to navigate to the Chronicle Instance Details section.
4. Edit Chronicle Instance:
   • Click Edit to open the Edit - Chronicle Instance Setup page. This page provides access to all instance details and uploaded keys.

5. Upload or Replace Keys:

• • To upload a new key: Click Choose File next to the specific key field and select the new key file. Acceptable file formats include .json or base64-encoded .txt.
  • To replace an existing key: Click on the relevant key field, then select Replace to upload the latest version of the key.

6. Save Changes:

• • After uploading or replacing the necessary keys, click Update to save your changes.

By following these steps, you ensure that your Chronicle instance remains securely integrated with Resolution Intelligence Cloud™, maintaining up-to-date credentials and uninterrupted functionality.

For further assistance or questions about key management, please contact support.