topic Re: How do we set an incident title ? in Cortex XDR Discussions

How do we set an incident title ?

aborgoENGIE — Tue, 15 Dec 2020 11:36:32 GMT

Hello all,

I feel this is a silly question but I don't know the answer and can't find it.

We have a lots of incident comming from Splunk integration with the following title: ":".

We can't find anywhere inside classifier or mapper how to set the title from a value of the input Splunk log.

Can you help please ?

Best regards,

Alexandre

Re: How do we set an incident title ?

gjenkins — Tue, 15 Dec 2020 16:47:34 GMT

Hi @aborgoENGIE,

Given the information provided, it would seem that you have an inquiry for XSOAR, not XDR. I recommend posting your inquiry on the XSOAR Discussion board for assistance.

Re: How do we set an incident title ?

Kennedy — Wed, 16 Dec 2020 06:56:21 GMT

ype of incident (injury, near miss, property damage, or theft) Address. Date of incident. Time of incident. Name of affected individual. A narrative description of the incident, including the sequence of events and results of the incident.

Re: How do we set an incident title ?

aborgoENGIE — Thu, 17 Dec 2020 14:58:47 GMT

Hi gjenkins,

You're right

Sorry for the inconvenience.

Best regards,

Alexandre

Re: How do we set an incident title ?

WhitneyBenson — Mon, 18 Jan 2021 01:14:03 GMT

Thank you for posting something like this

tellpizzahut