How to Import Observables from Analyzer Reports

This topic provides step-by-step instructions for importing observables from analyzer reports in TheHive.

Analyzers enrich observables with detailed contextual intelligence, generating a report with the results, which may include additional observables.

Required permissions

Only users with the manageObservable permission can manage observables in TheHive.

Procedure

1. Locate the observable on which you ran the analyzer.

2. In the observable details, select the relevant report in the Reports section.

3. In the Analysis report drawer, under the Observables extracted from analysis report section, select next to the observables you want to import.

4. Select Import observables.

5. In the Adding an observable drawer, review the prefilled information.

6. Select Confirm.

Next steps

• Add an Observable
• Remove an Observable
• Update the Status of an Observable
• Edit Multiple Observables
• Pin an Observable
• Export Data from Observables
• Run Analyzers on an Observable
• Run Responders on an Observable
• Exclude an Observable from Similarity Checks