{ "description": "Maps incoming Elasticsearch Case fields to XSOAR incident fields.", "feed": false, "id": "Elasticsearch Case - Incoming Mapper", "mapping": { "Elasticsearch Case": { "dontMapEventToLabels": true, "internalMapping": { "dbotMirrorDirection": { "complex": null, "simple": "mirror_direction" }, "dbotMirrorId": { "complex": null, "simple": "mirror_id" }, "dbotMirrorInstance": { "complex": null, "simple": "mirror_instance" }, "name": { "simple": "title" }, "details": { "simple": "description" }, "Owner": { "simple": "owner" }, "Category": { "simple": "category" }, "Elasticsearch Case Status": { "simple": "status" }, "severity": { "simple": "severity" }, "Tags": { "simple": "tags" }, "Elasticsearch Case ID": { "simple": "id" }, "occurred": { "simple": "created_at" }, "Elasticsearch Timestamp": { "simple": "created_at" }, "dbotMirrorLastSync": { "simple": "updated_at" } } } }, "name": "Elasticsearch Case - Incoming Mapper", "type": "mapping-incoming", "version": -1, "fromVersion": "6.2.0", "supportedModules": [ "agentix", "xsiam" ] }