Create additional incident data fields

  • Release version: Yokohama
  • Updated January 30, 2025
  • 2 minutes to read

    • Create Additional Incident Data Fields for the DLP incidents. You can create different types of fields such as string, number, check box, choice, date and time, and use them in the DLP incident forms.

    Before you begin

    Role required:
    • sn_dlir.admin
    • sn_dlir.analyst and sn_dlir.analyst_read
    Important:
    Additional incident data fields for DLP incidents are supported only on the San Diego version or later.

    About this task

    Additional Incident Data Fields are not stored as columns on the DLP incident table. Unlike standard table-level fields, they cannot be queried directly through list views, reports, or scripts that reference incident table fields.

    Additional Incident Data Fields view differs by role. DLP Analysts can view and set field values in the DLP Ops portal. DLP End Users can set field values, but fields that contain no value are hidden from them in the DLP Workspace. For example, an unchecked Check box or a Choice field with no selection is not displayed to end users.

    Procedure

    1. Navigate to All > DLP Administration > Additional Incident Data Fields.
    2. Create an Additional Incident Data Fields by clicking New.
    3. On the form, fill in the fields.
      Table 1. DLP Additional Incident Data Fields form
      Field Description
      Name Name of the Additional Incident Data Fields.
      Type Option to select the type of Additional Incident Data Fields. You can choose one of the following types:
      • String
      • Number
      • Check box
      • Choice

        If you select the Additional Incident Data Fields type as Choice, then after creating the Additional Incident Data Fields you can define the Additional Incident Data Fields choice options.

        To create an Additional Incident Data Fields choice option:
        1. Open the required Additional Incident Data Fields.
        2. In the Custom Choice Field Options section, select New.
        3. In the Option Name field, define the required option name.
        4. Select Submit.
      • Date
      • Date/Time
      Note:
      After you select a type for your new Additional Incident Data Fields, you can't modify it. If you want to modify the type, you must create a new Additional Incident Data Fields again with the required type. For Check box and Choice field types, DLP end users will not see the field in the DLP Workspace unless it contains a value (a checked box or a selected choice).
      Order Option to choose the order in which the Additional Incident Data Fields should be displayed. You can define the order value for each Additional Incident Data Fields. The Additional Incident Data Fields are sorted based on the order values that you define.

      By default, the Additional Incident Data Fields are sorted in ascending order. You can sort the Additional Incident Data Fields in descending order by clicking on the Order column.
      Active Option to indicate whether the Additional Incident Data Fields is active.
      Description Description for the Additional Incident Data Fields you created.
    4. Select Submit.