Customize close reasons for incidents by adding a server configuration in Cortex XSOAR.
The default incident Close Reason values are:
To customize the values you need to add a new server configuration.
Select→ → → → .
Add the following key and value:
A comma separated list. For example,
False Positive,Resolved,Duplicate,Low Priority,Invalid,Other.
For multi-tenant deployments, you need to add the configuration to each tenant, not only the Main Account.