Chronicle SOAR integration with XSOAR

[Roni]

Hello,

I seek to integrate my Chronicle Soar with my XSOAR tool within my on-premises environment.

Is there a built-in integration available for this purpose in Chronicle?

Thank you

[vaskenh]

Hi @Roni, can you share some additional details around what the proposed integration would look like architecturally?  Ie, which of the two is integrating into the other, and given that both are SOAR platforms how do you envision the relationship between the two?

At a quick glance in our Marketplace, we don't have an XSOAR integration, though on the SIEM side we do understand XSOAR Audit as a log type.

[Roni]

Hi,

I’m using Chronicle SIEM and XSOAR for my cloud setup, while I’ve got XSOAR and QRadar running on-prem

I’m looking to streamline things with a single case management system that covers both environments—cloud and on-prem.

For instance, I'd like it so that when I close a case in XSOAR, it automatically closes in Chronicle as well.

Thank you !! 

[SoarAndy]

Sync between platforms is quite common, and whilst Chronicle SecOps (/SOAR) does this, you are right it's integration specific, and we don't have an integration for xSOAR currently.  You could create a support ticket to formally add your request to any planned future works, or alternatively use the IDE to make a MVP one.
Regards
andy