Incident layout - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Administrator Guide

Product
Cortex XSIAM
Creation date
2024-07-16
Last date published
2024-12-12
Category
Administrator Guide
Abstract

Create custom layouts for your incident type.

Cortex XSIAM includes default incident layouts. Additional incident layouts can be added by installing content packs, duplicating incident layouts, or creating new custom incident layouts.

The default incident layouts and any layouts that are added from content packs, are locked by default and cannot be deleted, edited, exported or duplicated.

To modify an existing custom layout, go to SettingsConfigurationsObject SetupIncidentLayouts , right-click the layout in the layouts table, and select Edit, Duplicate, Delete, or Export.