Cisco Panoptica

Visualize Cisco Panoptica account details and monitor changes through queries and alerts.

Installation guide

Installation

info

You will need to create a new user in Panoptica to obtain an API Access Key and Secret Key. See their documentation for more information.

To install the Panoptica integration in JupiterOne, navigate to the Integrations tab in JupiterOne and select Panoptica. Click New Instance to begin configuring your integration.

Creating a configuration requires the following:

• The Account Name used to identify the Panoptica account in JupiterOne. Ingested entities will have this value stored in tag.AccountName when the AccountName toggle is enabled.

• Description to assist in identifying the integration instance, if desired.

• Polling Interval that you feel is sufficient for your monitoring needs. You may leave this as DISABLED and manually execute the integration.

• Your Panoptica Access Key and Secret Key.

Click Create once all values are provided to finalize the integration.

Next steps

Now that your integration instance has been configured, it will begin running on the polling interval you provided, populating data within JupiterOne. Continue on to our Instance management guide to learn more about working with and editing integration instances.

Cisco Panoptica data model

Data Model

Entities

The following entities are created:

Resources	Entity _type	Entity _class
Account	panoptica_account	Account
Cluster	panoptica_cluster	Cluster
Container	panoptica_container	Container
Image	panoptica_image	Image
Risk	panoptica_risk	Risk
User	panoptica_user	User
Vulnerability	panoptica_vulnerability	Vulnerability

Relationships

The following relationships are created:

Source Entity _type	Relationship _class	Target Entity _type
panoptica_account	HAS	panoptica_cluster
panoptica_account	HAS	panoptica_image
panoptica_account	HAS	panoptica_user
panoptica_cluster	HAS	panoptica_container
panoptica_cluster	HAS	panoptica_risk
panoptica_image	HAS	panoptica_vulnerability