# Priority Field

The priority field is very generic by default and should be updated to suit your environment. The following table describes how this field is set.

Default priority field definition

priority=lower(risk_level)

The risk_level field is a default field provided by the Palo Alto IoT data feed - it represents how "risky" the IoT Asset is considered.