Setting IncidentName and IncidentSeverity with Incoming Mapper

[ArthurCircus]

Hello,

I am trying to set the IncidentName and IncidentSeverity of an XSoar incident with the incoming mapper but it does not work. Ive tried googling and reading up but I cant find how you are supposed to set these fields.

Has anyone done this before and can point me to the right documentation to follow?

Thanks!

[chrking]

I've set the incident name before with a mapper - the field is just called "name" and it works as expected. I'd double check you're using the right fields and that the data format you're trying to set is correct. Also, I'd check that the incident type selector at the top of the mapping editor is set either to the correct incident type or "Common Mapping" when you configure the name/severity mappings.

[ArthurCircus]

Yeah, I realized I had gotten the wrong source document that I based my mapping on.. Thank you for your reply!