{
    "description": "Securonix incident incoming mapper.",
    "feed": false,
    "id": "Securonix Incident - Incoming Mapper",
    "mapping": {
        "Securonix Incident": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "Assigned User": {
                    "complex": {
                        "filters": [],
                        "root": "assignedUser",
                        "transformers": []
                    }
                },
                "Assignment Group": {
                    "complex": {
                        "filters": [],
                        "root": "assignedGroup",
                        "transformers": []
                    }
                },
                "Incident Link": {
                    "complex": {
                        "filters": [],
                        "root": "url",
                        "transformers": []
                    }
                },
                "Securonix Bulk Action Allowed": {
                    "complex": {
                        "filters": [],
                        "root": "bulkactionallowed",
                        "transformers": []
                    }
                },
                "Securonix Case Create Time": {
                    "complex": {
                        "filters": [],
                        "root": "casecreatetime",
                        "transformers": [
                            {
                                "operator": "TimeStampToDate"
                            }
                        ]
                    }
                },
                "Securonix Case Event End Time": {
                    "complex": {
                        "filters": [],
                        "root": "caseEventEndTime",
                        "transformers": [
                            {
                                "operator": "TimeStampToDate"
                            }
                        ]
                    }
                },
                "Securonix Close Incident": {
                    "complex": {
                        "filters": [],
                        "root": "close_sx_incident",
                        "transformers": []
                    }
                },
                "Securonix Entity": {
                    "complex": {
                        "filters": [],
                        "root": "entity",
                        "transformers": []
                    }
                },
                "Securonix Incident ID": {
                    "complex": {
                        "filters": [],
                        "root": "incidentId",
                        "transformers": []
                    }
                },
                "Securonix Incident Status": {
                    "complex": {
                        "filters": [],
                        "root": "incidentStatus",
                        "transformers": []
                    }
                },
                "Securonix Incident Type": {
                    "complex": {
                        "filters": [],
                        "root": "incidentType",
                        "transformers": []
                    }
                },
                "Securonix Is Whitelisted": {
                    "complex": {
                        "filters": [],
                        "root": "isWhitelisted",
                        "transformers": []
                    }
                },
                "Securonix Last Update Date": {
                    "complex": {
                        "filters": [],
                        "root": "lastUpdateDate",
                        "transformers": [
                            {
                                "operator": "TimeStampToDate"
                            }
                        ]
                    }
                },
                "Securonix Parent Case ID": {
                    "complex": {
                        "filters": [],
                        "root": "parentCaseId",
                        "transformers": []
                    }
                },
                "Securonix Policies": {
                    "complex": {
                        "filters": [],
                        "root": "policy_list",
                        "transformers": []
                    }
                },
                "Securonix Policy Stages": {
                    "complex": {
                        "filters": [],
                        "root": "policy_stages_table",
                        "transformers": [
                            {
                                "args": {
                                    "headers": {
                                        "value": {
                                            "simple": "Stage Name,Policies"
                                        }
                                    },
                                    "is_auto_json_transform": {},
                                    "json_transform_properties": {},
                                    "title": {}
                                },
                                "operator": "JsonToTable"
                            }
                        ]
                    }
                },
                "Securonix Policy Type": {
                    "complex": {
                        "filters": [],
                        "root": "policy_type",
                        "transformers": []
                    }
                },
                "Securonix Reason": {
                    "complex": {
                        "filters": [],
                        "root": "reason",
                        "transformers": []
                    }
                },
                "Securonix Risk Score": {
                    "complex": {
                        "filters": [],
                        "root": "riskscore",
                        "transformers": []
                    }
                },
                "Securonix Sandbox Policy": {
                    "complex": {
                        "filters": [],
                        "root": "sandBoxPolicy",
                        "transformers": []
                    }
                },
                "Securonix Status Completed": {
                    "complex": {
                        "filters": [],
                        "root": "statusCompleted",
                        "transformers": []
                    }
                },
                "Securonix Tenant Color": {
                    "complex": {
                        "accessor": "tenantcolor",
                        "filters": [],
                        "root": "tenantInfo",
                        "transformers": []
                    }
                },
                "Securonix Tenant ID": {
                    "complex": {
                        "accessor": "tenantid",
                        "filters": [],
                        "root": "tenantInfo",
                        "transformers": []
                    }
                },
                "Securonix Tenant Short Code": {
                    "complex": {
                        "accessor": "tenantshortcode",
                        "filters": [],
                        "root": "tenantInfo",
                        "transformers": []
                    }
                },
                "Securonix Violation Spotter Query": {
                    "complex": {
                        "filters": [],
                        "root": "solrquery",
                        "transformers": []
                    }
                },
                "Securonix Violator ID": {
                    "complex": {
                        "filters": [],
                        "root": "violatorId",
                        "transformers": []
                    }
                },
                "Securonix Violator Sub Text": {
                    "complex": {
                        "filters": [],
                        "root": "violatorSubText",
                        "transformers": []
                    }
                },
                "Securonix Violator Text": {
                    "complex": {
                        "filters": [],
                        "root": "violatorText",
                        "transformers": []
                    }
                },
                "Securonix Watchlisted": {
                    "complex": {
                        "filters": [],
                        "root": "watchlisted",
                        "transformers": []
                    }
                },
                "Securonix Workflow Name": {
                    "complex": {
                        "filters": [],
                        "root": "workflowName",
                        "transformers": []
                    }
                },
                "Tenant Name": {
                    "complex": {
                        "accessor": "tenantname",
                        "filters": [],
                        "root": "tenantInfo",
                        "transformers": []
                    }
                },
                "dbotMirrorDirection": {
                    "complex": {
                        "filters": [],
                        "root": "mirror_direction",
                        "transformers": []
                    }
                },
                "dbotMirrorId": {
                    "complex": {
                        "filters": [],
                        "root": "incidentId",
                        "transformers": []
                    }
                },
                "dbotMirrorInstance": {
                    "complex": {
                        "filters": [],
                        "root": "mirror_instance",
                        "transformers": []
                    }
                },
                "dbotMirrorTags": {
                    "complex": {
                        "filters": [],
                        "root": "mirror_tags",
                        "transformers": []
                    }
                },
                "occurred": {
                    "complex": {
                        "filters": [],
                        "root": "caseEventStartTime",
                        "transformers": [
                            {
                                "operator": "TimeStampToDate"
                            }
                        ]
                    }
                },
                "severity": {
                    "complex": {
                        "filters": [],
                        "root": "priority",
                        "transformers": []
                    }
                }
            }
        }
    },
    "name": "Securonix Incident - Incoming Mapper",
    "type": "mapping-incoming",
    "version": -1,
    "fromVersion": "6.5.0"
}