Customize some of the input fields of a generative AI skill to suit the requirements of your environment.
시작하기 전에
Roles required: admin
프로시저
-
Navigate to .
-
Select .
These Security Incident Response skills are displayed:
- Security incident recommended actions
The AI Search application must be enabled so that the Recommended Actions skill works for security incidents. To verify AI Search is enabled on your instance, navigate to . Contact support if the page indicates AI Search is not enabled.
- Post incident analysis
- Security operations metrics analysis
This skill is activated for use with an AI agent. See Analyze security operations metrics agentic workflow for more information.
- Correlation insights generation
- Security incident summarization
- Resolution notes generation
- Security operations metrics analysis
- Generate content for shift handover
- Security Incident Quality Assessment
-
Create a copy of a skill and customize the input fields.
-
Select .
-
Confirm your choice in the modal.
The guided setup is displayed.
-
In General details, enter a unique name and description for the skill.
-
Proceed to the next step by selecting Save and continue.
-
Select Choose input.
주: Some skills do not require all the configuration steps listed below. Select the only tasks that are displayed in the left panel and follow the prompts. After you have completed all the tasks, activate the
skill.
If Choose input is selected, these input templates for the skill are listed: Work In Progress, Review, and Closed. The Work In Progress template is selected.
You can configure some of the base input table fields, the conditions, and the related lists for the templates. Select only from the related tables supported on the lists for your input data.
You can’t modify the base input table [sn_si_incident] or add a new data source for your copy of the security incident summarization skill.
-
Continue to modify the editable fields in the Work In Progress template with the condition builder and filtering conditions.
-
Select Save template to save your changes to a template.
-
Proceed to the next step in the Guided Setup for the Work In Progress template by selecting Save and continue.
- Customize prompt: Edit the prompt by reordering or removing the predefined sections. You can review and test the prompt on a security incident record for each input template
configuration.
- Define availability:
| Option |
Description |
| Skill is always available |
The skill is always available to users. |
| Customize skill availability |
The skill is available only when the conditions are met (Default). Use the condition builder to set your conditions. |
- Select display:
| Option |
Description |
| In-product |
Show security incident summarization in all Security products. Now Assist skills are displayed on forms and workspaces. |
| User roles |
Select the expand icon ( ) |
| Now Assist panel |
Now Assist skills are available in the Now Assist panel. |
| Conversational experiences |
Verify where the skill is displayed and add roles for who can view it. Select Now Assist Panel in the Conversational experiences field to display the skill in the Now Assist panel. |
-
Select Save template to save your changes to the Work In Progress template.
-
Select the Review template.
-
Continue to modify the editable fields in the Review and Closed templates with filtering conditions as described in the previous steps.
-
Select Save and continue to proceed to the next step in the Guided Setup.
-
Select Save template to save your changes to a template.
-
Select Review and Activate to review your skill and make any additional modifications.
-
Select Activate.
Your skill is displayed on the Security Incident page in the All available Security Incident skills section.
-
Select Activate skill.
) > Make a copy.