Add a section to an incident layout - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation
Product
Cortex XSIAM
Creation date
2024-03-06
Last date published
2024-10-07
Category
Administrator Guide
Abstract

Add a section to an incident layout.

You can add a section or sections to an incident layout and drag the fields required to each of the sections.

  1. In the Incident Layout Builder, from the Sections tab, drag the New Section to the New tab.

    Note

    Click the settings icon from the New tab to change the name, duplicate or delete the tab.

  2. From the Fields tab, drag a field to the section.

  3. Click Save Version.