Issue field types

Explore Cortex XSIAM custom issue field types, including text, selection, date, grid, HTML, Markdown, timer, and URL fields.

You can create the following types of issue fields.

Field	Description
Boolean	True or False Incoming values 0, false, and False are treated as False. Incoming values true, True, or any number besides 0 are treated as True. Other values are treated as null.
Date picker	Adds the date to the field. Supported time formats for validation are ISO 8601 and Epoch. Other values are treated as null. You cannot set filters, starring rules, automation rules, layout rules, or issue exclusions based on the values in custom timestamp fields.
Grid (table)	Include an interactive, editable grid as a field. For details, see Create a grid field for an issue. When a grid field is shown in the Issues table, if there are values in the field, they do not display in the table. Instead, the column shows Data Available.
HTML	Create and view HTML content. When an HTML field is shown in the Issues table, if there is a value in the field, it does not display in the Issues table. Instead, the column shows Data Available. The following HTML tags are not permitted: blockquote, del, dd, div, dl, dt, fieldset, form, h1, h2, h3, h4, h5, h6, hr, iframe, ins, li, math, noscript, ol, pre, p, script, style, table, ul, address, article, aside, canvas, details, dialog, figcaption, figure, footer, header, hgroup, main, nav, output, progress, section, video. The following CSS tags are not permitted: background-color, text-align, font-size, font-family, font-weight, color, line-height, border-style, border, page-break-inside, tablelayout, padding, background-size, display, padding-top, padding-right, padding-bottom, padding-left, text-size-adjust, break-inside, word-break, width, height, -ms-text-size-adjust, -webkit-text-size-adjust.
Long text	Long text is analyzed and tokenized, and entries are indexed as individual words, enabling you to perform advanced searches and use wildcards. Long text fields cannot be sorted and cannot be used in graphical dashboard widgets. While editing a long text field, pressing enter will create a new line. Case is insensitive.
Markdown	Add markdown-formatted text as a Template which is displayed to users in the field. Markdown lets you add basic formatting to text to provide a better end-user experience. When a Markdown field is shown in the Issues table, if there is a value in the field, it does not display in the table. Instead, the column shows Data Available.
Multi select / Array	Includes two options: Multi select from a pre-filled list. An empty array field for the user to add one or more values as a comma-separated list. In the Basic Settings section, enter a comma-separated list of values.
Number	Can contain any number. Default is 0.
Short Text	Short text is treated as a single unit of text, and is not indexed by word. Advanced search, including wildcards, is not supported. Short text fields are case insensitive. While editing a short text field, pressing enter will save and close. Recommended use is one word entries. Examples: username, email address, etc.
Single select	Select one from a list of options. Add a list of comma-separated values. By default, the first value is used, unless the checkbox for Use first as default is cleared.
Timer	Timer fields enable you to view how much time has passed since the timer was started and how much time remains until the timer times out. You can also configure a script to run when a timer times out.
URL	Contains a URL.