2022-09-25 08:46 PM
As the title suggests, I'd like to know if it's possible to add new event sources via the API or if that's not available perhaps via MongoDB
Manually adding/updating hundreds of event sources is quite tedious so a better way to use automation or bulk update methods would be appreciated.
The use of Demisto to do this would also be quite useful since we utilise that internally.(I do know that demisto is no longer the orchestrator of choice for netwitness, but we're not going to threatconnect)