End-of-Life (EoL)

Create a Custom Incident Field

Follow these instructions to create custom incident fields.
You can define custom incident fields based on the information you want to display in your Incident Type layouts, as well as the information ingested from third party integrations.
  1. Select
    Settings
    ADVANCED
    Fields
    + New Field
    .
    Depending on the field type, you can determine if the field contents are case-sensitive, as well as if the field is mandatory.
  2. In the
    Field Type
    field, from the dropdown list select the Incident Field Types.
  3. Complete the following parameters:
    Field
    Description
    Field Name
    A descriptive name indicating the information that the field contains.
    Tooltip
    (
    Optional
    ) Additional information you want to make available to users of this field.
  4. If relevant to the field type, add the Basic Settings.
  5. In the
    Attributes
    tab, add the attribute parameters.
  6. Click
    Save
    .
  7. To add the field to the incident, go to
    Settings
    ADVANCED
    Incident Types
    , select the incident, and click
    Edit Layout
    .
  8. In the
    Library
    dialog box, in the
    Cortex XSOAR Sections
    tab, drag and drop
    + New Section
    on to the required tab.
  9. In the
    Incident
    field tab, drag and drop the field that you have created into the
    New Section
    .

Recommended For You