Properties installed with Security Incident Response

Security Incident Response adds the following properties.
Table 1. Security Incident properties
Property Usage
Allow multiple CSM cases from a Security Incident.

sn_si.allow_multiple_csm_cases

When set to true, keeps the Create CSM Case button available on the security incident. When set to false, only one case can be created and the button disappears for that incident.
  • Type: true | false
  • Default value: false
  • Location: Security Incident > Administration > Properties

sn_si.allow.toll.roads

Allow toll roads to be used.

sn_si.autodispatch.geolocation

Used to update estimated travel time.
Default end time for all security analysts when no schedule is set, formatted as 17:00

sn_si.default.end.time

  • Type: string
  • Default value: 17:00
  • Location: Security Incident > Administration > Properties
Default start time for all security analysts when no schedule is set, formatted as 08:00

sn_si.default.start.time

  • Type: string
  • Default value: 08:00
  • Location: Security Incident > Administration > Properties

sn_si.evening.rush.hours

Evening rush hour span, formatted as 14:30-16:00.

sn_si.map.merge.task.agent.markers

Merges the task and agent markers on the geolocation maps with a purple marker.

sn_si.morning.rush.hours

Morning rush hour span, formatted as 06:30-08:00.
Allow customization when creating a problem or change request from a Security Incident

sn_si.popup

When a problem or change is created, this property opens a pop-up window to modify the request.

If set to false, the problem or change request has the same priority, short description, and description as the security incident without the option to add or edit those fields.

  • Type: true | false
  • Default value: true
  • Location: Security Incident > Administration > Properties

sn_si.rush.travel.buffer

Percentage to add to all rush hour travel times.

sn_si.travel.buffer

Percentage to add to all travel times. An example of a valid percentage value is 15.
sn_si.unlocked Admin users can access Security Incident Response.
Assignment properties for Security Incident Response
Location Weight

sn_si.location.weight

A rating used when calculating the criteria to use for auto-assigning a security analyst. If, for example, location is considered for a task, the location weight value is added to the security analyst rating.
  • Type: integer
  • Default value: 10
  • Location: Security Incident > Administration > Properties
Skills Weight

sn_si.skills.weight

A rating used when calculating the criteria to use for auto-assigning a security analyst. If, for example, skills are considered for a task, the skills weight value is added to the security analyst rating.
  • Type: integer
  • Default value: 10
  • Location: Security Incident > Administration > Properties
Set the maximum number of security analysts that are processed by auto-assignment at a time

sn_si.max.agents.processed

The system has an absolute limit of 300 security analysts. If you specify more than 300, it sets the value to that level. The system cannot auto-dispatch a task for a dispatch group that contains more security analysts than the value configured.
  • Type: integer
  • Default value: 100
  • Location: Security Incident > Administration > Properties
Time Zone Weight

sn_si.timezone.weight

A rating used when calculating the criteria to use for auto-assigning a security analyst. If, for example, the security analyst time zone is considered for a task, the time zone weight value is added to the security analyst rating.
  • Type: integer
  • Default value: 10
  • Location: Security Incident > Administration > Properties
Amount of time (in minutes) to add between the end of a task and the travel start of the next.

sn_si.work.spacing

Amount of time to add between the end of a task and the travel start of the next.

An example of a valid time value is 10.

  • Type: integer
  • Default value: 0
  • Location: Security Incident > Administration > Properties