diff --git a/bin/contentctl_project/contentctl_core/application/factory/new_content_factory.py b/bin/contentctl_project/contentctl_core/application/factory/new_content_factory.py
index c9ba65cf73..c9a3a4f102 100644
--- a/bin/contentctl_project/contentctl_core/application/factory/new_content_factory.py
+++ b/bin/contentctl_project/contentctl_core/application/factory/new_content_factory.py
@@ -63,6 +63,7 @@ class NewContentFactory():
             if answers['detection_product'] == 'SSA':
                 self.output_dto.obj['tags']['product'] = ['Splunk Behavioral Analytics']
             self.output_dto.obj['tags']['risk_score'] = 'UPDATE (impact * confidence)/100'
+            self.output_dto.obj['tags']['required_fields'] = ['UPDATE_required_fields']
             self.output_dto.obj['tags']['security_domain'] = answers['security_domain']
             self.output_dto.obj['source'] = answers['detection_kind']
             self.output_dto.obj['tests'] = list()