Update issue fields with playbook tasks - Use the setIssue script to set and update all system issue fields. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation
Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-04
Category
Administrator Guide
Abstract

Use the setIssue script to set and update all system issue fields.

During the investigation you can set and update issue fields using the setIssue script in a playbook task.

You initially define issue fields after the planning stage, with mapping and classification for how the issues will be ingested from third-party integrations into Cortex XSIAM.

Note

  • The setIssue script includes all available fields; use the scroll bar to see all the fields.

  • The name field has a limit of 600 characters. If there are more than 600 characters, you can shorten the name field to under 600 characters and then include the full information in a long text field such as the description field.

  • There are many fields already available as part of the Common Type content pack. Before creating a new issue field, check if there is an existing field that matches your needs.

For more information, see Update issue fields