Modify 'Other Records' tab Security Incident Response Workspace
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-19-2025 01:45 AM
My goals is to allow analysts to link multiple incidents to an sn_si_incident record. I have thought of a number of ways to do this, but I'm coming to a dead-end.
My options seem to be:
- Modify the UI action in Other records on a sn_si_incident within the workspace to allow multiple incidents to be linked and displayed in the Other Records > IT Records > Incident. This currently only allows for 1 linked incident. I've been unable to locate either the list, or the UI action to change this behaviour. I've tried searching various lists and ui actions but I'm unable to track down either to modify.
OR
Add a related list of Incident -> Parent to the form in the Security Incident Reponse Workspace. I've tried to add the related list to a number of views of the form. However non of them seem to impact the view of the form in the Workspace. SN utils tells me the form name is 'sn_si_incident - sirw'. However changed the form view 'sirw' does not reflect in the workspace, and I am unable to find a page of this name in UI builder.
OR
Add a new tab to the record page for sn_si_incident in the Workspace of just related lists.
I feel as though there is something simple that I could be missing in UI builder, admittedly I'm not very experienced with using UI Builder at all though.
If anyone has any suggestions on how to best to start with any of these it would be much appreciated.
- Labels:
-
Security Incident Response