[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eThis page guides you on configuring events within Google SecOps SOAR.\u003c/p\u003e\n"],["\u003cp\u003eDetailed information on mapping events and creating visual families can be found in the Ontology Overview.\u003c/p\u003e\n"],["\u003cp\u003eYou can add a model family or map new fields directly from the Cases screen under the Alert > Events tab.\u003c/p\u003e\n"],["\u003cp\u003eThe Event Configuration page contains more information on how to configure mapping and assign visual families.\u003c/p\u003e\n"]]],[],null,["# Deciding what events to configure\n=================================\n\nSupported in: \nGoogle secops [SOAR](/chronicle/docs/secops/google-secops-soar-toc) \n\nFor full information on mapping events and creating visual families, refer to\n[Ontology Overview.](/chronicle/docs/soar/admin-tasks/ontology/ontology-overview)\n\nTo add a model family or map new fields from the Cases screen:\n\n1. Select a case from the case queue and navigate to the Alert \\\u003e Events tab.\n2. Click the wheel icon on the right of the event to which you want to assign the visual family or the mapping.\n3. Continue to [Event Configuration](/chronicle/docs/soar/admin-tasks/ontology/configure-mapping-and-assign-visual-families) for more details.\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]