For the complete documentation index, see llms.txt. This page is also available as Markdown.
Cortex XSOAR 8.10 (On-pre8.10 (On-prem)Cortex XSOAR 8.x (On-prem

Customize incident close reasons

Customize incident close reasons in Cortex XSOAR 8.10 On-prem.

The default incident close reason values are:

  • False Positive

  • Resolved

  • Duplicate

  • Other

To customize the incident close reason, you need to add a new server configuration.

  1. Select Settings & Info → Settings → System → Server Settings → Server Configuration → Add Server Configuration.

  2. Add the following key and value:

    Key
    Value

    incident.closereasons

    A comma-separated list. For example, False Positive,Resolved,Duplicate,Low Priority,Invalid,Other.

Last updated

Was this helpful?