Orchestration & Automation Apps

An IBM Security Orchestration & Automation app is a collection of playbook components, code executables, or both that represent an end-to-end function and is deployed to the Orchestration & Automation application.

An Edge Gateway is a Kubernetes-based container deployment environment that hosts Orchestration & Automation app containers. Each Edge Gateway is paired to a single IBM Security QRadar Suite account.

Refer to the System Administrator Guide for information about downloading, installing and managing apps.

The Edge Gateway Deployment Guide provides the procedures to install, configure and manage an Edge Gateway to host your apps. Using the Edge Gateway for your apps enables you to install and configure a Python-based app, which is a software package that extends the functionality of IBM Security QRadar SOAR. It can contain one or more playbook components, an external code component, or both. Playbook components include Python scripts, rules, workflows, functions, message destinations, fields, and data tables. An external code component can access and return external data, interact or integrate with other security systems, or be a utility that performs a specific action.

The App Developer's Guide provides the procedures for developers to write, package and publish their own apps.