Security alerts notes

Hi,

but other field like kibana.alert.workflow_status are visible…

What field can I use to add variable information (e.g. a TT number) to the alert that is discoverable?