Add multiple security incident observables

  • Freigeben Version: Australia
  • Aktualisiert 12. März 2026
  • 1 Minute Lesedauer

    • To save time, you can add multiple security incident observables to the security incident observables list.

    Vorbereitungen

    Role required: sn_ti_write
    Hinweis:
    When adding multiple security incident observables, duplicates are ignored during processing.

    Prozedur

    1. Navigate to Security Incident.
    2. Choose an incident.
    3. Click the Add Multiple Observables related link.
    4. Enter or paste multiple observables.
      Entries can be of any Observable Type. Accepted formats are: comma, new line, tab, or pipe separators.
      Add multiple observables comma delimited list example
      Hinweis:
      When you add an observable to the security incident, the system checks for any other configuration items or users associated with it. The Related Configuration Items and Related Users related list tabs are updated accordingly.
      Note: Observable values not auto-detected are assigned to type Unknown.
    5. Click Submit..