---
title: "Adding Veeam ONE Instances"
description: "To add a Veeam ONE integration instance, perform the following steps: In the main menu, click Settings. On the Integrations > Instances tab, search the Veeam ONE REST API (Partner Contribution) integration and click Add instance."
canonical: "https://helpcenter.veeam.com/archive/security_plugins_xsoar/1/guide/xsoar_vone_instances_configure.html"
breadcrumb: "User Guide > Working with Instances > Configuring Instances > Adding Veeam ONE Instances"
dateModified: "2026-09-07"
---

# Adding Veeam ONE Instances

To add a Veeam ONE integration instance, perform the following steps:

1. In the main menu, click **Settings**.
2. On the **Integrations > Instances** tab, search the **Veeam ONE** **REST API (Partner Contribution)** integration and click **Add instance**.
3. In the **Instance Settings** window, specify the following settings:

   - **Name** — a name of the Veeam ONE instance. Select the **Fetches incidents** setting to start fetching incidents from the instance and display data on the Veeam Incident Dashboard. 
   - **Classifier** — a name of the integration incident classifier. By default, *Veeam ONE Incidents Classifier* is used. If you want to customize the default classifier, find it on the **Settings > Objects Setup > Incidents > Classification and Mapping** tab, make a copy and edit integration incident types. Then, select the new classifier in the instance settings.

     ::: tip

     You can also create a new classifier for integration incident types.

     :::

   - **Mapper (Incoming)** — a name of the integration mapper for incoming incidents. By default, *Veeam ONE Incoming Mapper* is used. If you want to customize the default mapper, find it on the **Settings > Objects Setup > Incidents > Classification and Mapping** tab, make a copy and edit mapping between event attributes and integration incident types. Then, select the new mapper in the instance settings.
   - **Credentials** — credentials you use to connect to the Veeam ONE REST API. Must have administrator privileges and multi-factor authentication (MFA) disabled.
   - **Resource URL** — URL you use to connect to the Veeam ONE REST API:

     - Format — *\<hostname\>:\<port\>*
     - Default port number — *1239*

   - **First fetch time** — a time period that defines how far back in time incidents will be fetched from the instance for the first time. The default value is *3 days*.
   - **Triggered Alarms Per Request** — maximum number of incidents based on triggered alarms that can be created per fetch. The default value is *200*.
   - **API Request Timeout (Seconds)** — timeout for Veeam ONE REST API requests. The default value is *120*.
   - **Incidents Fetch Interval** — a time interval for fetching new incidents from the instance. The default value is *10 minutes*.

   ::: note

   Other settings should be specified according to your infrastructure.

   :::

4. To check the connection to the Veeam ONE REST API, click **Test**.
5. If the check is successful, click **Save & exit**. Fetching incidents will start automatically.

   ::: tip

   To view fetch history, select the instance and click the history icon.

   :::

![](images/xsoar_vone_instance_add.png)