Customize Incident Close Reasons

Customize incident close reasons in Cortex XSOAR 6.13.

The default incident Close Reason values are:

• False Positive
• Resolved
• Duplicate
• Other

To customize the values you need to add a new server configuration.

1. Select Settings → About → Troubleshooting → Add Server Configuration.
2. Add the following key and value:

   Key	Value
   incident.closereasons	A comma separated list. For example, False Positive,Resolved,Duplicate,Low Priority,Invalid,Other Note For multi-tenant deployments, you need to add the configuration to each tenant, not only the main account.