{
"description": "Maps SOCRadar incident fields.",
"feed": false,
"id": "SOCRadar Incident Mapper",
"mapping": {
"SOCRadar Generic": {
"dontMapEventToLabels": true,
"internalMapping": {
"Alert ID": {
"complex": null,
"simple": "id"
},
"Alert Name": {
"complex": null,
"simple": "alarm_notification_texts.alarm_title"
},
"SOCRadar Incident Main Type": {
"complex": null,
"simple": "alarm_type_details.alarm_main_type"
},
"SOCRadar Incident Sub Type": {
"complex": null,
"simple": "alarm_type_details.alarm_sub_type"
},
"SOCRadar Incident ID": {
"complex": null,
"simple": "id"
},
"severity": {
"complex": null,
"simple": "alarm_risk_level"
}
}
},
"dbot_classification_incident_type_all": {
"dontMapEventToLabels": false,
"internalMapping": {
"Alert Name": {
"complex": null,
"simple": "alarm_notification_texts.alarm_title"
},
"SOCRadar Incident Main Type": {
"complex": null,
"simple": "alarm_type_details.alarm_main_type"
},
"SOCRadar Incident Sub Type": {
"complex": null,
"simple": "alarm_type_details.alarm_sub_type"
},
"Ticket Opened Date": {
"complex": null,
"simple": "insert_date"
},
"details": {
"complex": {
"accessor": "alarm_main_type",
"filters": [],
"root": "alarm_type_details",
"transformers": []
},
"simple": ""
}
}
}
},
"name": "SOCRadar Incident Mapper",
"type": "mapping-incoming",
"version": -1,
"fromVersion": "6.0.0"
}