How to update a Case

Update a Case

As long as a case is open, you can update, edit, or delete any of its resources. This makes a case very powerful when compared to an alert.

1. From Cases click on the case you want to edit.

2. To add a resource, click the dropdown icon and select the resource you want to add to the case:

• Tags - unique identifiers and added metadata
• Watchers - other agents that should get updates/alerts on the case
• Alerts - associated alerts
• Entities - associated entities
• Events - associated events

3. To remove a resource, click the x by their name.