incident.properties.incident_origin = "Email"
The field incident_origin is a select field with the following values: SIEMEmailHotlineSOC AnalystHotline CallThreat Hunting We previously had that assigned and nothing was modified in either the field or the script but yet it mysteriously broke this week. I attempted to see if it was all select fields but when I tested against another one it worked. I have attached a picture of what the field looks like. Any ideas as to why this occurred would be helpful. Thanks!