Loading
Set Up and Maintain Your Salesforce Organization
Set Up the Security Mesh Signal Definitions

Set Up the Security Mesh Signal Definitions

To specify the pipelines that send security-related data to Security Mesh, configure signal definitions. This step initiates the automated background tasks that ingest and standardize your data.

Required Editions

Available in: Lightning Experience
Available in: Enterprise, Performance, Unlimited, and Developer Editions with the Security Center license and Data 360
Event Monitoring data usage requires the Event Monitoring add-on subscription.
User Permissions Needed
To view Security Center pages: View Security Center Pages
To create and edit security policies: Manage Security Center
To view Security Mesh data: View Security Mesh
To configure Security Mesh settings: Manage Security Mesh
To access Data 360 data: Access Data 360 Setup Menu
To access Event Monitoring data: View Event Log Files

In Data Cloud Setup, go to Feature Manager and enable the Connectors feature.

Security Mesh connectors require a separate third-party subscription, where applicable.

  1. From the Configuration subtab, select New Signal Definition.
  2. Select the type of signal definition to add, and then click Next.
  3. Select a connector from the list, or click New Connector and follow the prompts. If you create a connector, click Test Connection to confirm that Security Mesh connects with the source.
    Some signal types use a built-in webhook and don't require a connector, in which case this step is skipped.
  4. Click Next.
  5. Enter a name for your signal definition.
  6. Click Submit.
  7. Repeat these steps for each signal definition you want to set up.
    The signal definitions appear in a grid in the Signal Definitions section. A signal definition's status changes to Active when its pipeline is set up and Security Mesh is ingesting data from that source.
Note
Note After you click Submit, Security Mesh automatically handles background tasks, such as data ingestion, standardization, and analytics modeling. Monitoring these tasks isn’t necessary, but to follow along, you can view real-time status updates in Setup | App Hub | Monitor.

After setup, you can manage individual signal definitions from their row menu in the Signal Definitions grid.

Now that you've configured your environment and established your signal definitions, view the Security Mesh insights from the left-hand navigation menu. Monitor your security landscape through unified dashboards that highlight trends, anomalies, and suspicious activity. Use these pre-built insights to streamline your security analysis and investigate specific threats.

 
Caricamento
Salesforce Help | Article