Hello John,
Thank you for your response,
Oh it was just about the "edit" button, I didn't even think about it. It's been 2 days since I'm reviewing everything about this issue.
Regarding the rule, I already associated the custom task in the ordered activities :
![](https://dw1.s81c.com//IMWUC/MessageImages/b02d1166a3a04dc3960216c032524fe0.png)
Now I confirm that those custom fields will show up ONLY if the "edit" button is clicked.
![](https://dw1.s81c.com//IMWUC/MessageImages/6534967231994766a8d1d81cadca8b21.png)
Thank you John,
------------------------------
Sha Ben
Cybersecurity engineer
------------------------------
Original Message:
Sent: Mon April 22, 2024 06:39 AM
From: John Quirke
Subject: Custom (select / multiseclect) field not displaying in the incident layout
I am able to multiselect on that custom field .... within that custom task once I am in edit mode ( and only edit mode)
![](https://dw1.s81c.com//IMWUC/MessageImages/f52090fb1fb948a09d790b4b14da5714.png)
------------------------------
John Quirke
Original Message:
Sent: Mon April 22, 2024 06:16 AM
From: John Quirke
Subject: Custom (select / multiseclect) field not displaying in the incident layout
Hi Ben
Can you also post your rule here ...
The rule determines when you custom task is included in the incident type and incident area.
I had the same issue as you until I add the custom task to a rule and associate it with the incident type under rule conditions
![](https://dw1.s81c.com//IMWUC/MessageImages/c84f63464d3b41ee91f1502e746c55b9.png)
------------------------------
John Quirke
Original Message:
Sent: Mon April 22, 2024 03:34 AM
From: Sha Ben
Subject: Custom (select / multiseclect) field not displaying in the incident layout
Hello,
USE CASE: Based on a use case, I have created a custom initial triage task, within it as a layout, I also created a custom field (select) to include time choices (in minutes) for analyst to choose in order to get the value and search logs in Qradar based on that time range.
ISSUE: Once I create the custom field, it's not showing in the custom initial triage task so that the analyst choose a timestamp.
Screenshots:
In the screenshots I also tried with multiselect custom field and it's not showing anything in the layout.
I appreciate your support and suggestions regarding this matter,
Thank you,
------------------------------
Sha Ben
Cybersecurity engineer
------------------------------