Ingesting the sample Secureworks tickets

Release version: Australia

Updated March 12, 2026

1 minute to read

Select the sample tickets that are to be ingested.

Before you begin

Role required: sn_si.admin

If the mapping form is not displayed, click Mapping on the progress bar.
You can either pull the five most recent sample tickets or provide the unique ticket IDs for the specific tickets that you want to use for your mapping experience.
From the Ingestion Preference choice list, select one of the following:
- Retrieve most recent tickets: The 5 most recent tickets are retrieved.
- Select tickets based on ticket ID: Specify the ticket ID for the ticket to be retrieved. You can specify a maximum of 5 ticket ids separated by commas.
Click Fetch Sample Data to pull the latest sample ticket data from the Secureworks CTP server.
The pull for sample tickets may take a few moments. A message indicating that the transaction is working is displayed at the top of the screen. The retrieved tickets are displayed as individual tabs. Click on a tab to view the ticket data. For each ticket, you can see the ticket fields and their values, and details of the contributing event that triggered the ticket.
Note:
You will see details of contributing events only if they have occurred in the last 7 days. Events older than 7 days are not displayed.

After you have fetched the sample data, the next step is map the ticket fields to the security incident.