In addition to the many BlueApps offered by USM Anywhere, LevelBlue offers you the option of configuring an advanced BlueApp custom to your resources and the way you use them. With custom BlueApps, you can better monitor activity in your environment according to your needs.

The custom BlueApp feature is quite powerful, unlocking the ability to import events from almost any product or service that uses a REST API. To make this configuration process easy and approachable, LevelBlue offers configuration guides for the most oft-requested custom BlueApps, providing clear guidance on the exact configurations needed to set up authentication of your custom BlueApp.

https://intercom.help/usm-anywhere/en/articles/7061412-custom-alienapp-configuration-guides

Before getting started, you will need to ensure that you are able to generate the required authentication information from the application or service for which you are trying to create an application. The configuration guides LevelBlue provides endeavor to document the highest level of security available when connecting to your third party resource. For that reason, LevelBlue recommends that you follow the documented authentication configuration when setting up your custom BlueApp.

To use a configuration guide to create your custom BlueApp

1. Go to https://intercom.help/usm-anywhere/en/articles/7061412-custom-alienapp-configuration-guides.
2. In the Configuration Guide list, locate the BlueApp template you want to follow and select it.

3. Open the PDF link on the Configuration Guide page for your selected BlueApp and save the file for your reference.

4. Within USM Anywhere, navigate to Data Sources > BlueApps > Custom Apps.

5. Select Add Custom App to begin creating a new custom BlueApp.

6. Follow the guidelines to configure each step of your custom BlueApp.
   The guide is designed to offer you the most security and robust functionality available. For that reason, we recommend following the configuration in the guide exactly as it is presented unless your environment necessitates that you make a change.

   • App Info: Provide a unique name, logo, and description for your custom BlueApp.

   • API Credentials: Configure your custom BlueApp with secure credentials to your third party resource.

   • API Configuration: Represent the API configuration your custom BlueApp should expect from your third party resource.

   • Field Mapping: Map important fields from your third party resource's API to their matching fields within USM Anywhere.

   • Summary Fields: Select which fields will appear in the details page of events generated from your new custom BlueApp.

7. Once you have finished all of the configuration steps for your custom BlueApp, click Save & Close to create it.
   It will now be available to you under the My Apps tab of USM Anywhere.