About App Central in the Automation Service

App Central provides apps to help you be more productive in the Automation Service. From here, you can search and add new integrations with all the needed components.

note

Cloud SOAR has its own App Central. For more information, see App Central in Cloud SOAR Automation.

View App Central

To view App Central, access the Automation Service and click App Central in the left navigation bar.

Before you can access App Central, you must have the App Central Access role capability. For more information on role capabilities needed to use the Automation Service, see Configure role capabilities.

App Central UI

1. Playbooks. Click to view playbooks in App Central that are available to install.
2. Integrations. Click to view integrations in App Central that are available to install.
3. Search. Search for integrations or playbooks to install.
4. Current hour actions count. Shows how many playbook actions have been executed in the current hour in your organization.
   note

   By default, the actions limit is set to 200 per hour to prevent abuse of system resources or runaway processes. For more information, see Actions limit.

5. Download. Click to install an integration or install a playbook.

Work with integrations in App Central

Integrations are connectors to applications from industry-leading network and security vendors. Resources in the integrations provide the actions run by Playbooks. While the Integrations menu item in the Automation Service UI shows the integrations installed to your environment, the Integrations tab in App Central shows you integrations in App Central that you can install.

Install an integration from App Central

1. Use the Search bar in the upper right of the Integrations tab to find integrations.
2. Click Download in the lower left corner of the integration box.
3. Click Install to install the integration. After installation is complete, Installed replaces the Download link in the corner of the integration box.
4. IMPORTANT: Find the article for the integration in Integrations in App Central to see if there are additional steps you need to follow to configure the installed integration. Failure to perform these additional steps may result in the integration not working properly.

Update an integration from App Central

Integrations in App Central display a version number. The version indicates when there is a change to the integration. If a newer version of an installed integration is available, you can update the integration from App Central by clicking Update.

Update integrations to include all available actions

The purpose of this section is to provide you the information you need to update your integrations to include all types of actions that should be present in that integration, for example, Containment, Custom, Scheduled, and so on. It's a good idea to update every integration installed from App Central to make sure you do not have any integrations without useful actions.

Update integrations in App Central using keywords in the bottom left corner of the integration:

• UPDATE. Appears on the installed integrations if there is a new version of that integration and with a new YAML configuration file.
  
• INSTALLED: Appears when the integration is installed and updated to the latest version, and with the correct actions.
  
• DOWNLOAD. Appears if this integration is not yet installed.
  

Update an installed integration to show all actions

Here an example of updating an installed integration.

1. In the Integrations section, check the actions present on the installed integration. In the example below, the only types of actions in the integration are Enrichment and Notification.
   
2. Go to App Central and search for the same integration. Click the integration.
   
3. On the dialog that appears, click INSTALL.
   
4. Go to the Integrations section and select the same integration. As you see in the image below, the Containment action type was added to the two types of actions that were there previously.
   

Update an integration with a new version to show all actions

If there are two different versions between the integration installed and that in App Central, the type of operation required to update the integration is UPDATE.

1. In the Integrations section, open the installed integration in code mode to view the version.
   
2. Go to App Central and search for the same integration. Click UPDATE.
   
3. On the dialog that appears, click Update.
   
4. Go back to the Integrations section at the end of the update operation. Open the integration and check the if the version of that integration updated.
   
5. Check in the integration detail to see if it shows all the types of actions we expect.
   

Playbooks in App Central

A playbook is a predefined set of actions and conditional statements that run in an automated workflow to respond to a certain event or incident type.

While Playbooks in the Automation Service UI show the playbooks installed to your environment, the Playbooks tab in App Central shows you additional playbooks you can install.

Install a playbook from App Central

1. Use the Search bar in the upper right of the Playbooks tab to find playbooks.
2. Click Download in the corner of the playbook box.
3. Click Next.
4. Click Install to install the playbook.
5. Click Close. After installation is complete, Installed replaces the Download link in the corner of the playbook box.
6. IMPORTANT: Click Show More in the playbook box to see if there are additional steps you need to follow to configure the installed playbook. Failure to perform these additional steps may result in the playbook not working properly.