netwrix · TheNewCat777 · Nov 25, 2025
@@ -18,14 +18,7 @@ Follow the steps to install Microsoft Copilot add-on.
 
 Follow the steps to configure Copilot for monitoring.
 
-**Step 1 –** Make sure you have a storage account to store logs. To reduce the volume of the stored
-logs and the corresponding cost, it is recommended to create a rule in Life Cycle Management for
-this storage. Netwrix Auditor doesn't need historic logs, after the add-on has written them into the
-database. Refer to the
-[corresponding Microsoft article](https://learn.microsoft.com/en-us/azure/storage/blobs/lifecycle-management-overview?tabs=azure-portal)
-for additional information.
-
-**Step 2 –** Register an Azure App and grant it the following permissions:
+**Step 1 –** Register an Azure App and grant it the following permissions:
 
 - Microsoft.Graph — Domain.Read.All
 - Office 365 Management APIs — ActivityFeed.Read

@@ -75,7 +75,7 @@ folder and open the **dbparam.ini** file for editing.
 
 ## Download the Add-On
 
-**Step 1 –** Download the distribution package **Netwrix_Auditor_Add-on_for_CyberArk_PAS.zip**.
+**Step 1 –** Download the distribution package.
 
 **Step 2 –** Unpack it to a folder on the computer where you plan to deploy the add-on.
 
@@ -85,20 +85,20 @@ _Remember,_ deploy the add-on on the same machine with the Auditor Server.
 
 Follow the steps to install the Add-On:
 
-**Step 3 –** Navigate to your add-on package.
+**Step 1 –** Navigate to your add-on package.
 
-**Step 4 –** Unzip the Add-On to a desired folder.
+**Step 2 –** Unzip the Add-On to a desired folder.
 
-**Step 5 –** Run the installation package.
+**Step 3 –** Run the installation package.
 
-**Step 6 –** Accept the license agreement and follow the instructions of the setup wizard.
+**Step 4 –** Accept the license agreement and follow the instructions of the setup wizard.
 
-**Step 7 –** On the **Destination Folder** step, specify the installation folder (_C:\Program Files
+**Step 5 –** On the **Destination Folder** step, specify the installation folder (_C:\Program Files
 (x86)\Netwrix Add-ons\<Add-on name>_ by default).
 
-**Step 8 –** Click **Install**.
+**Step 6 –** Click **Install**.
 
-**Step 9 –** When done, click **Finish**.
+**Step 7 –** When done, click **Finish**.
 
 ## Configure Add-on Parameters
 

@@ -97,7 +97,7 @@ remote syslog listener, and specify the logging level. For that, run the followi
 
 `ncli> rsyslog-config add-module server-name=<CustomServerName> module-name=AUDIT include-monitor-logs=false level=notice`
 
-**Step 5 –** Finally, enable syslog forwarding to remote server:  
+**Step 5 –** Finally, enable syslog forwarding to remote server:
 ` ncli> rsyslog-config set-status enable=true`
 
 This syslog server will be added to the cluster automatically.
@@ -132,23 +132,6 @@ to _5_ (_Notice_). For that, follow the steps below:
 
 **Step 3 –** Finally, click **Save**.
 
-## Download the Add-On
-
-Download the distribution package from the Netwrix website and unpack it to a folder on the computer
-where you plan to deploy the add-on.
-
-Customers who are logged in to the Netwrix Customer Portal can download the latest version of their
-software products from the My Products page:
-[https://www.netwrix.com/my_products.html](https://www.netwrix.com/my_products.html). See the
-[Customer Portal Access](https://helpcenter.netwrix.com/bundle/NetwrixCustomerPortalAccess/page/Customer_Portal_Access.html)
-topic for information on how to register for a Customer Portal account.
-
-Partners and MSPs who are logged into the Netwrix Partner Portal can download the latest version of
-their software products from the My Product page:
-[https://www.netwrix.com/par/site/products](https://www.netwrix.com/my_products.html). To receive an
-invitation to the Partner Portal, please contact
-[[email protected]](http://[email protected]/).
-
 ## Configure Add-On Parameters
 
 Open the add-on folder and edit the **settings.xml** file to configure the add-on parameters:

@@ -8,7 +8,7 @@ sidebar_position: 10
 
 Follow the steps to deploy the Add-On.
 
-**Step 1 –** Download the distribution package **Netwrix_Auditor_Add-on_for_Okta.zip**.
+**Step 1 –** Download the distribution package.
 
 **Step 2 –** Unpack it to a folder on the computer where you plan to deploy the add-on.
 

@@ -6,9 +6,9 @@ sidebar_position: 80
 
 # Add-Ons
 
-The [Netwrix Auditor Add-on Store](https://www.netwrix.com/netwrix_addons.html) contains free
-add-ons developed by Netwrix and your peers in the community. The add-ons help you leverage
-integration between your on-premises or cloud applications and Netwrix Auditor.
+The Netwrix Auditor Add-on Store contains free add-ons developed by Netwrix and your peers in
+the community. The add-ons help you leverage integration between your on-premises or cloud
+applications and Netwrix Auditor.
 
 The list of available add-ons keeps growing because with the new RESTful API, the integration
 capabilities of Netwrix Auditor are unlimited. Netwrix encourages users to develop add-ons, upload

@@ -6,7 +6,7 @@ sidebar_position: 30
 
 # Integrate Alerts with Add-On
 
-The add-on is shipped with a special set of alerts developed by Netwrixindustry experts. These
+The add-on is shipped with a special set of alerts developed by Netwrix industry experts. These
 alerts are helpful for handling some routine cases that require service manager's attention, e.g.,
 account lockouts, changes to administrative groups. The alerts have preset filters and can be easily
 uploaded to Auditor, and then integrated with the add-on and your ServiceNow system. These alerts
@@ -16,8 +16,12 @@ Alternatively, you can integrate any default Auditor alert or your custom-built
 addon.
 
 By default, none of the alerts are integrated with add-on. To instruct the add-on to create tickets
-for alerts, you should enable integration. Netwrix provides a command-line tool for enabling
-integration with the add-on.
+for alerts, you should enable integration.
+
+In Auditor, go to Alerts, select the required alerts, click Edit, and in the Response
+Action section of the alert properties specify the full path to Netwrix.ITSM.AlertResponseAction.exe
+file (the add-on component responsible for alert handling), for example,
+_C:\Addon\ITSM_SI\Netwrix.ITSM.AlertResponseAction.exe_.
 
 **NOTE:** Make sure to turn on alerting in Auditor. You should manually set the state to "**On**"
 for all alerts you want to integrate with the add-on.
@@ -34,9 +38,6 @@ C:\Add-on\Netwrix.ITSM.AlertsUploaderTool.exe
 
 **Step 2 –** Execute one of the following commands depending on your task.
 
-| To...                                              | Execute...                                                                                                                                                                                                                                                                                                                                                                    |
-| -------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Upload alert set shipped with the addon to Auditor | Netwrix.ITSM.AlertsUploaderTool.exe /UploadTemplates Once uploaded, the alerts appear in the **All Alerts** list in Auditor, their names start with "_ITSM add-on_". Make sure to set their state to **"On**" (turn them on) manually.                                                                                                                                        |
-| Review alert list and their integration status     | Netwrix.ITSM.AlertsUploaderTool.exe /List You will see the full list of Auditor alerts, with an enabled or disabled integration status for each alert.                                                                                                                                                                                                                        |
-| Enable integration                                 | Netwrix.ITSM.AlertsUploaderTool.exe /Update "`<Alert Name>`" Enable where `<Alert Name>` is the name of the alert you want to integrate with the add-on. Provide alert names as they appear in Auditor. **NOTE:** You can enable integration with one alert at a time. For example: Netwrix.ITSM.AlertsUploaderTool.exe /Update "ITSM Add-On: User Account Locked Out" Enable |
-| Disable integration                                | Netwrix.ITSM.AlertsUploaderTool.exe /Update "`<Alert Name>`" Disable where `<Alert Name>` is the name of the alert for which you want to disable integration. **NOTE:** You can disable integration with one alert at a time. For example: Netwrix.ITSM.AlertsUploaderTool.exe /Update "ITSM Add-On: User Account Locked Out" Disable                                         |
+| To...                                    | Execute...                                                                                                                                                                                                                                                                                                                                                                    |
+|------------------------------------------| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Upload alert set shipped with the add-on | Netwrix.ITSM.AlertsUploaderTool.exe /UploadTemplates Once uploaded, the alerts appear in the **All Alerts** list in Auditor, their names start with "_ITSM add-on_". Make sure to set their state to **"On**" (turn them on) manually.
@@ -7,8 +7,7 @@ sidebar_position: 10
 # Install Add-On
 
 After downloading the add-on package from Netwrix add-on store, copy it to the a computer where the
-Auditor Server resides. Unpack the ZIP archive to a folder of your choice; by default, it will be
-unpacked to the **Netwrix_Auditor_Add-on_for_ITSM** folder.
+Auditor Server resides. Unpack the ZIP archive to a folder of your choice.
 
 The main component of the add- on is implemented as a service named Netwrix Auditor **ITSM
 Integration Service**. This service will run on the computer where the Auditor Server works, and

@@ -21,9 +21,7 @@ for additional information.
 
 Follow the steps to download the add-on.
 
-**Step 1 –** Download the distribution package Netwrix_Auditor_Add-on_for_Splunk.zip from the
-following web page:
-[https://www.netwrix.com/add-on_for_splunk.html](https://www.netwrix.com/add-on_for_splunk.html)
+**Step 1 –** Download the distribution package.
 
 **Step 2 –** Unpack it to a folder on the computer from which you can access Splunk Web.