Custom Fields not showing in context data

[ssarangaya]

Hi all,

I have two custom fields. Initially, these fields were added to the context data even if they are empty. Now, they don't get added at all. This code used to work demisto.incident()['customFields']['fieldhere'] to grab the custom fields, but now it returns a KeyError error.

Any advice?

[MBeauchamp2]

It should be demisto.incident()['CustomFields']['fieldname']

You can always print each get to make sure your getting what you think you're getting.  I.e print(demisto.incident()['CustomFields']) 

In regards to the fields, were the custom fields added after the Incident was created?  If so they won't be in the incident object as they didn't exist at the time of creation, you'll need to use the setIncident builtin command to add a value to make them appear.  

If it's a new Incident, make sure the fields are associated with the Incident Type or all Types before creation.

[ssarangaya]

Ah, that's right! I did have 'CustomFields', but it still returns a KeyError. The fields are added to all incident types. Initially, I didn't need to set these fields. I could just access them via that code. But now it's not working. They are not showing in new incidents.

[MBeauchamp2]

Is the field perhaps restricted to specific Incident Types?  And the Incident you are testing on isn't one of those?

[ssarangaya]

I don't think so. The 'Add to all incident types' is checked.

What I'm trying to do is check if the field is empty or not. If it's empty, add a value. But I'm unable to do this because when I check for the field, I get a KeyError error. (FYI: I'm trying to do these things via automation)

[ssarangaya · Accepted solution]

fixed with  date_ack = demisto.incident()['CustomFields'].get('dateacknowledged')