Detection Event Field Maps

Once the detection event rule is created, you need to add field mappings.

Perform the following steps for adding field mappings:

  1. Click on the detection event rule you created and navigate to the Detection event field maps.
  2. You must add the following fields mappings.

    Detection Event field Maps.

To update the status of the passed posture to the Closed state, you need to add field mapping for the Resolution code, Resolution notes, and Caller field.

You can add any additional field mappings as required.

We recommend setting the Coalesce field as mentioned in the example to avoid creating duplicate entries.