# SysAid

## Before you start

* You must use your SysAid account credentials and not SSO credentials to generate an access token. You can find them by going to your user profile in SysAid.
* Authentication is **limited to one SysAid account at a time** - the generated access token will only be able to access data from that specific account.

***

## Step 1: Create a SysAid Application Authentication

1. **SysAid Application**
   * A SysAid application is required for the alerter.
     * Please make sure you have a working SysAid application beforehand.
   * Please refer to [SysAid Getting Starter Guide](https://documentation.sysaid.com/docs/getting-started-guide) as needed.
2. **Create application key**
   * Navigate to the Developer Documentation for [SysAid public API](https://developers.sysaid.com/reference)
     * Navigate to [Create Application Key](https://developers.sysaid.com/reference/createapplicationkey) section.
     * Fill in the ***userName*** and ***password*** for your ***SysAid Account Credentials*** and ***applicationName*** of the already created ***SysAid Application***.

       ![SysAid Credentials](/files/bSW3VaERuq8OEnPRDSs8)
     * Fill in the ***tokenLifetime*** as necessary, though default (24 Hrs) is sufficient.
     * Make sure to fill the ***Header*** and the ***URL*** with the ***x-sysaid-accountid***, which is your SysAid Account ID.

       ![SysAid Account ID fill in](/files/dJNmPTJIW6zma2MiGMUE)
   * Make sure to note down the response **clientId**, **clientSecret** and the **applicationName** for further use.

     ![Application Authentication Credentials](/files/kK1nY3ctSiFy9E1M7UbI)

***

## Step 2: Gather Service Record Details

1. **Service Record Type - Incidents**
   * The service records of type ***Incidents*** are created with each alert.
   * The default ***Incident*** type Service Record ***Template*** is used, if you need to change that, please note the ***templateId*** need to be used.
   * Please note the following data related to the above ***templateId***,
     * ***requestUser***
     * ***assignedGroup***
     * ***primaryCategory***
     * ***secondaryCategory***
     * ***secondaryCategory***
     * ***thirdLevelCategory***
2. **Alternative Method**
   * Alternatively, you can send an existing Incident type Service Record ***ID*** to be used as the template.

***

## Deliverables

Please email to <socv2@cybrhawk.com>:

1. **Application Credentials**:
   * Please make sure the following credentials are noted in the email.
     * x-sysaid-accountid
     * applicationName
     * clientId
     * clientSecret
2. **Incident Service Record Details**:
   * Please make sure you include the details or a valid service record ID
   * If including the details,
     * requestUser
     * assignedGroup
     * templateId
     * primaryCategory
     * secondaryCategory
     * secondaryCategory
     * thirdLevelCategory
   * If including a valid Incident Service Record ID,
     * The ID of the service record.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://cybrhawksoc.gitbook.io/cybrhawk-docs/platform-management/alerting/sysaid.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.