Create custom incident grid fields to view and edit a table when adding it to an incident. Add grid field to an incident type in Cortex XSOAR.
The grid field enables you to view and edit a table when adding it to an incident. You can create a grid field and add it to an incident type.
Select→ → → → → .
In the New Incident Field window Field Type field drop down list, select Grid (table).
Complete the following parameters:
A meaningful name for the grid field.
(Optional) A brief descriptive message that explains what the field is and how to use it.
User can add rows
(Optional) Enables users to add/remove rows in the grid.
In the Grid tab, add or remove the required rows and columns.
How you design the grid determines how it appears to users. If user can add rows field is selected, the user can add rows but not columns.
Configure each column by selecting the required field types, such as short text, boolean, URL, etc., for each column. You move the columns, rename, add values, etc.
If you select the Lock checkbox, the value for that field is static (not editable). If you do not select the Lock checkbox (default), users can perform inline editing.
In the Attributes tab, add the attribute parameters.
For example, add the
emailFieldTriggeredscript to run, which runs after the Incident Updates tag is stored in the database (unchecked). Make the field available to Access, Malware, and Network incident types.