Forum Discussion
akshay250692
Mar 22, 2023Brass Contributor
call all watchlist column entity in incident.
We have created watchlist which is having 3 column. So if any incident is triggered from watchlist, we should get all entities in incident. We have created watchlist based on ThreatIntel. It have 3 c...
GBushey
Mar 28, 2023Former Employee
Get rid of the "project" statement if you want to see all the columns. The "project" statement will only show those columns that are included as part of the statement ("SearchKey" in this case)
akshay250692
Mar 28, 2023Brass Contributor