Skip to main content
Question

Can I publish my SecOps SIEM custom integration in Content Hub?

  • April 24, 2026
  • 5 replies
  • 113 views

harshal.thakor
Forum|alt.badge.img+5

I have few questions about submission process for the SecOps SIEM custom integration:

  • Can I publish my SecOps SIEM custom integration in Content Hub?
    • It is containing these componants:
      • Ingestion Script
      • Dashboard
      • Detection Rules
      • Search Queries
  • Is there any public repository to submit these componants or any of them as part of content hub?

5 replies

dnehoda
Staff
Forum|alt.badge.img+19
  • Staff
  • April 24, 2026

You will want to go here

 

https://github.com/chronicle/content-hub

 

Review the requirements and get yourself setup to share with the community. 


harshal.thakor
Forum|alt.badge.img+5

Thanks for the response,

I have few questions:

  • Is this repository mainly intended for SecOps SOAR content, as it seems focused on SOAR components in Content Hub?
  • Does Content Hub also support SIEM custom integrations such as ingestion scripts, dashboards, detection rules, and search queries in Content Hub?
  • If supported, what is the process to publish or contribute these SIEM components to Content Hub?

darrenswift
Staff
Forum|alt.badge.img+4
  • Staff
  • April 28, 2026

I believe this is limited today to response integrations such as playbooks or response integrations (custom) 


harshal.thakor
Forum|alt.badge.img+5

@darrenswift Is the parser/ingestion script and detection rules of SecOps SIEM will be part of content hub in near future? Is there any ETA?


ylandovskyy
Staff
Forum|alt.badge.img+16

@harshal.thakor Today, parsers are also contributable:

https://github.com/chronicle/content-hub/tree/main/content/parsers/third_party

 

Rules and Ingestion Scripts - no immediate ETA.