Hi,
In SecOps. We have to create a new Security Tag that should be displayed in the Security Incident form UI, the new Security Tag should appear in the UI SIR form only if a field called VIP from the User table is true.
We created the tag, we create the rule, we ensured the formatter too, and works only if the new security tag is conditioned by a field of the same table (sn_si_incident) , but when I dot walk it to use the affected user table VIP field (sys_user), it does not work and the tag is not showing up in the SIR UI form. Has anyone experienced this? any help? thank you!
