System properties to send data

  • リリースバージョン: Australia
  • 更新日 2026年03月12日
  • 所要時間：3分

    • Review the system properties for TISC integrations to combine with SIRW. You can configure these properties to control how both applications manages the integrations.

    Key considerations

    The system properties for TISC integrations provide advanced configuration options on how the application handles observables and enrichments.

    1. To set TISC integrations system properties within SIRW, navigate to the System Properties for Threat Intelligence and access the [sys_properties] table.
    2. The system properties control and handles the behavior of each individual data push operation.
    3. When the property is enabled then the data is pushed automatically when the observables or enrichments data is generated in the SIR Workspace.
    4. If the property is disabled, then the data is pushed manually and allows the users to push data using the UI actions from the SIR Workspace.
    The following lists shows the system properties for TISC - SIR integration:
    • Push observables data both automatically and manually from SIR: Enable sn_ti.allow_observable_and_enrichment_records_push property to push the data either automatically or manual. If disabled, this property will disable both automatic and manual mode for all the data push from SIR.
    • Push threat lookup results: Enable this sn_ti.automatic_push_threat_lookup_results system property to push threat lookup data automatically to TISC. If disabled, security analysts can still push the threat lookup data manually.
    • Push sighting search results to TISC: Enable sn_ti.automatic_push_sighting_results_to_tisc this system property to push sighting search data automatically to TISC. If disabled, security analysts can still push the sighting search data manually.
    • Push observables: Enable sn_ti.automatic_push_observable_to_tisc this system property to push observables data automatically to TISC. If disabled, security analysts can still push the observables data manually.
    • Push enrichment results: Enable sn_ti.automatic_push_enichment_results this system property to push enrichment results data automatically to TISC. If disabled, security analysts can still push the enrichment results data manually.