Skip to main content

When updating an integration with connectors, you usually get warnings that the ontology mapping will change (and whether you want to keep the default one or accept the modified one).

Is there anyway to figure out what the changes in event fields and the mapping rules before the integration change is made?

There is a feature request in for a preview function - https://issuetracker.google.com/373944336


You can also export the mapping as a backup - https://cloud.google.com/chronicle/docs/soar/marketplace/using-the-marketplace#ontology-override


Reply