The investigation screen leverages the related list views created on security incident to configure associated lists.

Before you begin

Role required: sn_si.admin

The following is a procedure to create a view and add related lists to it.

Procedure

  1. Navigate to Security incident list.
  2. Open any security incident in the Classic UI.
  3. From the form context menu, navigate to Configure > Related Lists.
    The slush bucket window is displayed.

    Related list classic UI

  4. Go to View name drop-down list and click New to create a new view.
    You must add a name to the view.
    Create new view
  5. Add the desired related lists to the right bucket under the newly created view and save the view.
    This view will be used to render the associated info on the Investigation tab.