How to update a Case


Update a Case

As long as a case is open, you can update, edit, or delete any of its resources. This makes a case very powerful when compared to an alert.

  1. From Cases click on the case you want to edit.
  1. To add a resource, click the dropdown icon and select the resource you want to add to the case:
  • Tags - unique identifiers and added metadata
  • Watchers - other agents that should get updates/alerts on the case
  • Alerts - associated alerts
  • Entities - associated entities
  • Events - associated events
  1. To remove a resource, click the x by their name.