Troubleshoot issues when creating incident fields.
When trying to download a content update, you may receive the following message:
Warning: content update has encountered some conflicts
This occurs when a content update has an incident field with the same name as a custom incident field that already exists in Cortex XSOAR.
To resolve this issue, perform the following steps:
Click Install Content to force the update and retain your custom incident field. The content update will install without the system version of the incident field.
After deleting a field of type Grid (table) and creating a new field of another type (string, long text, etc.), you may receive the following error when trying to close or update an incident:
Cannot convert type []interface {} of '[map[] map[]]' to type string, field: sourceip (8902)
This error occurs with field type changes, if the fields are not compatible types, such as changing the type from long text to boolean or URL to short text. If you create an incident with that field, delete the field, create a new field with the same name but a different type, and then try to close the incident with that field, the error occurs.
For example, create a field of type table/grid and associate it with an incident type. Create an incident with that field, delete that table/grid field, and create a new field with the same name but associate it with a different type (such as short text). When you try to close the incident that has that field, an error may occur.
To resolve this issue, perform the following steps:
Go to Settings & Info → Settings → Object Setup → Incidents → Types.
Select the incident type that contains the changed field.
Click Edit Layouts.
Select the tab you want to edit.
Add the field you changed to the layout.
Save the form.
Go to the Incidents page and select the incident.
Click Close if you want to close the incident or Edit if you want to edit the incident.
In the Custom Fields area, reset (delete) the value for the field you changed.
Click Close Incident or Update Incident.