As long as a case is open, you can update, edit, or delete any of its resources. This makes a case very powerful when compared to an alert.
- From Cases click on the case you want to edit.
- To add a resource, click the dropdown icon and select the resource you want to add to the case:
- Tags - unique identifiers and added metadata
- Watchers - other agents that should get updates/alerts on the case
- Alerts - associated alerts
- Entities - associated entities
- Events - associated events
- To remove a resource, click the
xby their name.
Updated 5 months ago
Did this page help you?