01-25-2023 01:33 AM
I am trying to set the IncidentName and IncidentSeverity of an XSoar incident with the incoming mapper but it does not work. Ive tried googling and reading up but I cant find how you are supposed to set these fields.
Has anyone done this before and can point me to the right documentation to follow?
01-25-2023 08:43 PM
I've set the incident name before with a mapper - the field is just called "name" and it works as expected. I'd double check you're using the right fields and that the data format you're trying to set is correct. Also, I'd check that the incident type selector at the top of the mapping editor is set either to the correct incident type or "Common Mapping" when you configure the name/severity mappings.
01-26-2023 12:24 AM
Yeah, I realized I had gotten the wrong source document that I based my mapping on.. Thank you for your reply!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!