Configure Tooltips for Nodemaps

  • Release version: Zurich
  • Updated July 31, 2025
  • 1 minute to read

    • Use this section to configure tooltips for node map relationships on the investigation canvas.

    Before you begin

    Role required: sn_sec_tisc.admin

    Procedure

    1. Navigate to Workspaces > Threat Intelligence Security Center > Administration > Nodemap Controls > Tooltip Configuration.
    2. Select the desired object from the list.
      By default, the following three records are provisioned in the base system.
      1. Observables
      2. Indicators
      3. Objects
    3. Select Observable as an example record.
    4. Add one or more values to the observable record, if required.
      Similarly add values to indicators and other objects.
      Note:
      Each object supports a maximum of six values.
    5. Select Save to apply the changes.
    6. Go to the Investigation Canvas section and select Refresh icon.
      The same values configured on the Tooltip Configuration page will be displayed on each node map.