Layouts, fields and data tables

The Incident Layouts feature helps you to visually present the incident. The user interface makes it easy to drag and drop the different elements into a layout, and to set conditions to filter out unnecessary information.

Within each layout, you can organize information by fields and data tables.

You can use fields as data capture points for analysis review and to produce metrics. Features, such as rules, reports, and analytic dashboards, can access the values in fields. Fields should be distinct, specific, and purposeful.

You can use data tables to capture and organize field values in a spreadsheet table format. Features, such as rules and reports, can access the values in data tables. Data tables can also be used in apps, where the information escalated from another security program populates the data table with values. Depending on the app, a user may be able to access limited capabilities of that security program directly from the data table.

You create and manage fields and data tables from the Layouts tab where you can add them to the various incident tabs.

You can also create fields and data tables for other features, such as tasks and functions. Creating fields within tasks allows users to spend more time performing actions and capturing information directly in the tasks and less time switching between the incident tabs. When possible, you should add relevant fields to each task for easier data capture AND the layout of the appropriate incident tabs to allow and ease of review and reporting.