Create custom case statuses and resolution reasons - You can create custom case status and resolutions that are that are tailored to your workflow. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-11
Category
Administrator Guide
Abstract

You can create custom case status and resolutions that are that are tailored to your workflow.

Note

Before you create a custom status, please review the built-in options. For more information, see Resolution reasons for cases and issues.

We recommend using the built-in statuses and resolution reasons where possible. Custom statuses and resolution reasons might not be supported by all content, and status syncing can take time.

In addition, custom statuses affect Cortex XSIAM’s ability to learn, correctly identify, and score future cases.

You can create custom cases statuses and custom resolution reasons that are tailored to your workflow. Custom case statuses and resolution reasons apply to case and issue statuses, and can also be used in playbooks.

Adding custom ,case statuses and resolution reasons requires a View/Edit RBAC permission for Case Properties (under ConfigurationsObject Setup).

Note

After creation, custom statuses and resolution reasons cannot be deleted or modified.

How to create custom case statuses
  1. Go to ConfigurationsObject SetupCasesProperties.

    The existing statuses and resolution types are listed.

  2. In the Add another status field, type a new status and click Save.

  3. Click Edit to rearrange the order of the statuses. This order is presented when you set a status or select a resolution type.