Set Security Incident Response properties

Security Incident Response properties allow you to control how different aspects of the system function.

Before you begin

Role required: sn_si.admin

Procedure

  1. Navigate to Security Incident > Administration > Properties.
  2. Set the following properties, as needed.
    Table 1. Security Incident Properties
    Property Usage
    Default start time for all security analysts when no schedule is set, formatted as 08:00

    sn_si.default.start.time

    • Type: string
    • Default value: 08:00
    • Location: Security Incident > Administration > Properties
    Default end time for all security analysts when no schedule is set, formatted as 17:00

    sn_si.default.end.time

    • Type: string
    • Default value: 17:00
    • Location: Security Incident > Administration > Properties
    Allow customization when creating a Problem or Change Request from a Security Incident

    sn_si.popup

    When a problem or change is created, opens a pop-up window to modify the request.

    If is set to false, the problem or change request will have the same priority, short description, and description as the security incident without the option to add or edit those fields.

    • Type: true | false
    • Default value: true
    • Location: Security Incident > Administration > Properties
    Assignment properties for Security Incident Response
    Location Weight

    sn_si.location.weight

    A rating used when calculating the criteria to use for auto-assigning an security analyst. If, for example, location is considered for a task, the location weight value is added to the security analyst's rating.
    • Type: integer
    • Default value: 10
    • Location: Security Incident > Administration > Properties
    Skills Weight

    sn_si.skills.weight

    A rating used when calculating the criteria to use for auto-assigning a security analyst. If, for example, skills are considered for a task, the skills weight value is added to the security analyst's rating.
    • Type: integer
    • Default value: 10
    • Location: Security Incident > Administration > Properties
    Set the maximum number of security analysts that will be processed by auto-assignment at a time

    sn_si.max.agents.processed

    The system has an absolute limit of 300 security analysts and sets the value at that level if you specify more than 300. The system cannot auto-dispatch a task for a dispatch group that contains more security analysts than the value configured.
    • Type: integer
    • Default value: 100
    • Location: Security Incident > Administration > Properties
    Time Zone Weight

    sn_si.timezone.weight

    A rating used when calculating the criteria to use for auto-assigning a security analyst. If, for example, the security analyst's time zone is considered for a task, the time zone weight value is added to the security analyst's rating.
    • Type: integer
    • Default value: 10
    • Location: Security Incident > Administration > Properties
    Amount of time (in minutes) to add between the end of a task and the travel start of the next.

    sn_si.work.spacing

    An example of a valid time value is 10.
    • Type: integer
    • Default value: 0
    • Location: Security Incident > Administration > Properties
  3. Click Save.