First Seen

Common Types shortText

Details

IDincident_firstseen
CLI Namefirstseen
TypeshortText
Version-1
RequiredNo
Read OnlyNo
Use as KPINo
SearchableYes

Associated Incident Types

Source

incidentfield-First_Seen.json
Download History Raw 
{
    "associatedToAll": false,
    "associatedTypes": [
        "Malware",
        "Prisma Cloud",
        "GCP Compute Engine Misconfiguration",
        "AWS CloudTrail Misconfiguration",
        "AWS IAM Policy Misconfiguration",
        "AWS EC2 Instance Misconfiguration",
        "NetWitness Incident",
        "Symantec DLP Discover Incident",
        "Symantec DLP Endpoint Incident",
        "Symantec DLP Network Incident",
		"Prisma Cloud - VM Alert Prioritization",
        "Exabeam Notable User",
        "CrowdStrike Falcon OFP Detection"
    ],
    "caseInsensitive": true,
    "cliName": "firstseen",
    "closeForm": false,
    "content": true,
    "editForm": true,
    "group": 0,
    "hidden": false,
    "id": "incident_firstseen",
    "isReadOnly": false,
    "locked": false,
    "name": "First Seen",
    "neverSetAsRequired": false,
    "ownerOnly": false,
    "required": false,
    "sla": 0,
    "system": false,
    "systemAssociatedTypes": [
        "Symantec DLP Discover Incident",
        "Symantec DLP Endpoint Incident",
        "Symantec DLP Network Incident",
        "Prisma Cloud - VM Alert Prioritization",
        "CrowdStrike Falcon OFP Detection"
    ],
    "threshold": 72,
    "type": "shortText",
    "unmapped": false,
    "unsearchable": false,
    "useAsKpi": false,
    "version": -1,
    "fromVersion": "5.0.0",
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}