Create an incident type specifically for an
event you want Cortex XSOAR to deal with.
Select
Settings
Advanced
Incidents Type
New Incident Type
.
In the
New Incident Type
window,
add the following required parameters:
Field
Description
Name
Enter a descriptive name for the task. Try
to make this as informative as you can so readers of the playbook
can know what the task does before viewing the task details.
Default playbook
Select the playbook that is associated with
the incident type by default.
Layout
Select the incident layout for the incident
type. To customize the incident layout, see Customize Incident Layouts.
Run playbook automatically
Determines if the playbook runs when the event
is ingested.