Incident Management Module: Is posible to add custom meta as grouping criteria?

[MaximilianoCitt]

I'm currently working with a customer and he wants to start using the IM  module to create incidents automatically. We are using the ESA alerts mostly, and one of the alerts is related to the subject of an email. So, we want to use the subject as grouping criteria of the incident, but I can't figure out how can I do that... so, my question here is... is it possible tu use other "group by" criteria than the ones listed?

regards,

Max

[KapitanAl · Accepted solution]

Described for 10.6.x: 000035988 - How To Add Additional Fields Under Grouping Options For Incident Configuration Aggregation Rules in RSA Secu…  and for 11.x: https://community.rsa.com/community/products/netwitness/blog/2018/06/21/creating-custom-group-by-and-match-condition-fields-for-respond-server