topic Custom Fields not showing in context data in Cortex XSOAR Discussions

Custom Fields not showing in context data

ssarangaya — Wed, 19 Jul 2023 14:25:22 GMT

Hi all,

I have two custom fields. Initially, these fields were added to the context data even if they are empty. Now, they don't get added at all. This code used to work demisto.incident()['customFields']['fieldhere'] to grab the custom fields, but now it returns a KeyError error.

Any advice?

Re: Custom Fields not showing in context data

MBeauchamp2 — Wed, 19 Jul 2023 14:45:47 GMT

It should be demisto.incident()['CustomFields']['fieldname']

You can always print each get to make sure your getting what you think you're getting. I.e print(demisto.incident()['CustomFields'])

In regards to the fields, were the custom fields added after the Incident was created? If so they won't be in the incident object as they didn't exist at the time of creation, you'll need to use the setIncident builtin command to add a value to make them appear.

If it's a new Incident, make sure the fields are associated with the Incident Type or all Types before creation.

Re: Custom Fields not showing in context data

ssarangaya — Wed, 19 Jul 2023 15:04:02 GMT

Ah, that's right! I did have 'CustomFields', but it still returns a KeyError. The fields are added to all incident types. Initially, I didn't need to set these fields. I could just access them via that code. But now it's not working. They are not showing in new incidents.

Re: Custom Fields not showing in context data

MBeauchamp2 — Wed, 19 Jul 2023 15:10:48 GMT

Is the field perhaps restricted to specific Incident Types? And the Incident you are testing on isn't one of those?

Re: Custom Fields not showing in context data

ssarangaya — Wed, 19 Jul 2023 15:37:35 GMT

I don't think so. The 'Add to all incident types' is checked.

What I'm trying to do is check if the field is empty or not. If it's empty, add a value. But I'm unable to do this because when I check for the field, I get a KeyError error. (FYI: I'm trying to do these things via automation)

Re: Custom Fields not showing in context data

ssarangaya — Wed, 19 Jul 2023 19:10:52 GMT

fixed with date_ack = demisto.incident()['CustomFields'].get('dateacknowledged')