Create Additional Incident Data Fields

---
title: Create Additional Incident Data Fields
description: Create your Additional Incident Data Fields for the DLP incidents. You can create different types of Additional Incident Data Fields such as string, number, check box, choice, date and time, and use them in the DLP incident forms.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/data-loss-prevention/create-custom-fields-dlp.html
release: australia
product: Data Loss Prevention
classification: data-loss-prevention
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 5
breadcrumb: [Administer, Data Loss Prevention Incident Response, Security Operations]
---

# Create Additional Incident Data Fields

Create your Additional Incident Data Fields for the DLP incidents. You can create different types of Additional Incident Data Fields such as string, number, check box, choice, date and time, and use them in the DLP incident forms.

## Before you begin

Role required:

-   sn\_dlir.admin
-   sn\_dlir.analyst and sn\_dlir.analyst\_read

**Important:** Additional Incident Data Fields for DLP incidents are supported only on the San Diego version or later.

## About this task

Additional Incident Data Fields are associated with Field level restrictions, so if there are any Field level restrictions then it applies to Additional Incident Data Fields on the DLP Ops portal and End user portal.

## Procedure

1.  Navigate to **All** > **DLP Administration** > **Additional Incident Data Fields**.

2.  Create an Additional Incident Data Fields by clicking **New**.

3.  On the form, fill in the fields.

<table id="table_mzl_mbl_zrd"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Name

</td><td>

Name of the Additional Incident Data Fields.

</td></tr><tr><td>

Type

</td><td>

Option to select the type of Additional Incident Data Fields. You can choose one of the following types:-   **String**
-   **Number**
-   **Check box**
-   **Choice**

If you select the Additional Incident Data Fields type as **Choice**, then after creating the Additional Incident Data Fields you can define the Additional Incident Data Fields choice options.

To create an Additional Incident Data Fields choice option:

    1.  Open the required Additional Incident Data Fields.
    2.  In the Custom Choice Field Options section, click **New**.
    3.  In the Option Name field, define the required option name.
    4.  Click **Submit**.
-   **Date**
-   **Date/Time**
 **Note:** After you select a type for your new Additional Incident Data Fields, you are not allowed to modify it. If you want to modify the type, then you have to create a new Additional Incident Data Fields again with the required type.

</td></tr><tr><td>

Order

</td><td>

Option to choose the order in which the Additional Incident Data Fields should be displayed. You can define the order value for each Additional Incident Data Fields. The Additional Incident Data Fields are sorted based on the order values that you define.By default, the Additional Incident Data Fields are sorted in ascending order. You can sort the Additional Incident Data Fields in descending order by clicking on the **Order** column.

</td></tr><tr><td>

Active

</td><td>

Option to indicate whether the Additional Incident Data Fields is active.

</td></tr><tr><td>

Description

</td><td>

Description for the Additional Incident Data Fields you created.

</td></tr></tbody>
</table>4.  Click **Submit**.


**Parent Topic:**[DLP Incident Response Administration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/data-loss-prevention/data-loss-prevention-administration.md)

**Related topics**  


[DLP default configuration settings]()

[Create end user lookup rules]()

[Create assignment rules]()

[Create incident consolidation rules]()

[Create response due date rules]()

[Create Approval Rules]()

[Create user instructions templates]()

[Create email templates]()

[Create a Data Loss Prevention Incident Response SLA trigger]()

[Create a Data Loss Prevention Incident Response SLA definition]()

[Create assessments]()

[Configure response option for your DLP incidents]()

[Create incident response option rules]()

[Create age chart configurations]()

[Create user delegate configurations]()

[Create repeat offender identification rules]()

[DLP SLA Definition form]()

[Configure advanced settings]()

[Monitor DLP Integration Run process]()

[DLP Incident Access Restrictions]()

[DLP Incidents Archival]()