Skip to content

Commit 0a9a934

Browse files
authored
Chose a version of the alert message
1 parent cc4a33a commit 0a9a934

File tree

1 file changed

+3
-11
lines changed

1 file changed

+3
-11
lines changed

articles/sentinel/customize-alert-details.md

Lines changed: 3 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -88,18 +88,10 @@ Follow the procedure detailed below to use the alert details feature. These step
8888

8989
> [!CAUTION]
9090
>
91-
> If you onboarded Microsoft Sentinel to the Microsoft Defender portal, **do not customize** the following properties for alerts from Microsoft sources:
92-
> - *ProductName* field
93-
> - *ProductComponentName* field
94-
> - *ProviderName* field
95-
>
96-
> Attempting to do so will result in these alerts being dropped from Microsoft Defender XDR and no incident being created.
97-
98-
> [!CAUTION]
99-
>
100-
> If you onboarded Microsoft Sentinel to the Microsoft Defender portal, **do not customize** the *ProductName* field for alerts from Microsoft sources. Doing so will result in these alerts being dropped from Microsoft Defender XDR and no incident being created.
91+
> If you onboarded Microsoft Sentinel to the Microsoft Defender portal:
92+
> - **Do not customize** the *ProductName* field for alerts from Microsoft sources. Doing so will result in these alerts being dropped from Microsoft Defender XDR and no incident being created.
10193
>
102-
> Also, you will not be able to customize the *ProductComponentName* and *ProviderName* fields.
94+
> - The *ProductComponentName* and *ProviderName* fields are no longer available to be customized.
10395
10496
If you change your mind, or if you made a mistake, you can remove an alert detail by clicking the trash can icon next to the **Alert property/Value** pair, or delete the free text from the **Alert Name/Description Format** fields.
10597

0 commit comments

Comments
 (0)