Create a Grid Field for an Incident Type - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
8
Creation date
2024-09-18
Last date published
2024-10-31
Category
Administrator Guide
Solution
Cloud
Retire_Doc
Retiring
Link_to_new_Doc
/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation
Abstract

Create custom incident grid fields to view and edit a table when adding it to an incident. Add grid field to an incident type in Cortex XSOAR.

The grid field enables you to view and edit a table when adding it to an incident. You can create a grid field and add it to an incident type.

  1. Select Settings & Info → Settings → Object Setup → Incidents → Incident Fields → New.

  2. In the New Incident Field window Field Type field drop down list, select Grid (table).

  3. Complete the following parameters:

    Parameter

    Description

    Field Name

    A meaningful name for the grid field.

    Tooltip

    (Optional) A brief descriptive message that explains what the field is and how to use it.

    User can add rows

    (Optional) Enables users to add/remove rows in the grid.

  4. In the Grid tab, add or remove the required rows and columns.

    How you design the grid determines how it appears to users. If user can add rows field is selected, the user can add rows but not columns.

  5. Configure each column by selecting the required field types, such as short text, boolean, URL, etc., for each column. You move the columns, rename, add values, etc.

    If you select the Lock checkbox, the value for that field is static (not editable). If you do not select the Lock checkbox (default), users can perform inline editing.

    column-settings-2.png
  6. In the Attributes tab, add the attribute parameters.

    For example, add the emailFieldTriggered script to run, which runs after the Incident Updates tag is stored in the database (unchecked). Make the field available to Access, Malware, and Network incident types.

    new-grid-6.png
  7. Click Save.