Alert Investigation Customization - Customize an alert by creating fields and creating layouts. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

You can create custom alert fields and custom alert layouts. Custom alert layouts can include both out-of-the-box and custom alert fields. Alert layouts are applied to alerts according to layout rules.