adding dataset fields to alert or incident context data

PA_nts — Thu, 13 Nov 2025 07:36:24 GMT

Hi All,

Using a custom parsing rule i am adding a custom field a dataset - this works all good i can see my new field in the dataset with values.

question - how can i get this field to show in my alert and/or incident context data?

thanks in adv

topic adding dataset fields to alert or incident context data in Cortex XSIAM Discussions