A Resilient integration server is the system that you use to deploy specific types of Resilient apps to the Resilient SOAR Platform.

This guide provides the procedures to create and maintain a Resilient integration server, and provides the app deployment procedures.

A Resilient app, formerly called extension or integration, is a collection of playbook components, code executables or both that represent an end-to-end function and is deployed to the Resilient platform. Playbook components can include rules, workflows, Python scripts, custom fields, data tables and message destinations. An code executable can access and return external data, interact or integrate with other security systems, or be a utility that performs a specific action.

A Resilient app is available in two formats, one format supports the App Host Kubernetes-based container environments, the other supports the previously available extension format. The Resilient integration server is required only when deploying apps in the extension format, which is available as a .tar.gz file.

See the Apps section in the System Administrator Guide for the procedure to install and deploy container-based apps.

IBM Resilient has a number of apps in the extension format that you can download, customize and deploy. See Downloading and installing a package for details about accessing these extensions.

To develop your own app, refer to one of the following guides: