Request for Guidance on Updating “State” Field in Security Incident (SIR Scope)

[MadhuDanalN]

I need your guidance on updating the State field choices in the Security Incident [sn_si_incident] table within the SIR scope.

Currently, the State field displays the OOTB values — Draft, Analysis, Contain, Eradicate, Recover, Resolved, Closed.
I would like to modify these to align with our standard workflow as follows:

• New

• In Progress

• On Hold

• Escalate

• Resolved

• Closed

Could you please advise on the correct approach to update the OOTB State field within the SIR scope, preferably without creating a new field?
If any configuration steps or permissions are required (e.g., using a dictionary override or process definition update), when i remove that existing felid its showing in the form ,
So what happened when i refresh new choice will be visible and suddenly back to existing choices,
please guide me on the process.

[Ankur Bawiskar]

@MadhuDanalN 

Pointers

-> If you don't want to use the OOTB ones then remove those by Right Click Field -> Configuring -> Choices

-> Move the choices from right to left

-> then add your new ones

-> Save & this adds the choices only for your table + state field

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏

[MadhuDanalN]

Thank you for your rersponce @Ankur Bawiskar 
I have added like that but in the form we can't see the choices its blank and not able select that field

[Ankur Bawiskar]

@MadhuDanalN 

it should work fine.

-> I did the same for sc_task state field and added my own choices

-> also check default value for State field and you can add Dictionary Override and set your own Default value with the choice value you just now created

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏