End-of-Life (EoL)

Change the Display Name of Security Incidents

In Cortex XSOAR, the default term used for a security incident is incident. You can change the term that is used for security incidents from a predefined list of options. This term displays in reports, menus, tables, and commands (local and server) in Cortex XSOAR.
The term you select does not change the display name for content-related items, such as playbooks, integrations, scripts, and so on, dashboards, or the API.
(
Multi-Tenant
) When changing the display name of security incidents, the URL link which contains
/incident
may not work properly. For example, when changing the
incident
to
case
, sometimes the links are formed with the
/incident
URL and not with the
/case
URL. This can usually be corrected by clearing the browser cache and reloading the page.
  1. Navigate to
    Settings
    About
    Troubleshooting
    .
  2. In the
    Server Configuration
    section, click
    Add Server Configuration
    .
  3. In the
    Key
    field type
    UI.term.incident
    .
  4. In the
    Value
    field enter the value for the term.
    Value
    Term
    0
    Incidents (default)
    1
    Cases
    2
    Alerts
    3
    Events
    4
    Plays
    5
    Tickets
    6
    Issues
  5. Restart the server.

Recommended For You