| Table of Contents |
|---|
| minLevel | 1 |
|---|
| maxLevel | 2 |
|---|
| outline | false |
|---|
| type | flat |
|---|
| separator | brackets |
|---|
| printable | true |
|---|
|
...
You also need the Case management permission to link alerts to new or existing cases. Failing to meet this requirement will result in an error when accessing the case management menu (more info about managing roles and permissions here).
...
Associating an alert with a case
| Rw ui steps macro |
|---|
| Status |
|---|
| title | From the ellipsis menu |
|---|
|
→ You can start associating alerts to cases using the Escalate to case option in the ellipsis menu at the end of the row. → You can also click on the folder tray icon at the end of the row and then select Escalate to case from the case management menu that appears. | Status |
|---|
| title | from the alert details window |
|---|
|
→ Another possibility is to access the alert details window (more info here). Simply click the alert ID to open it and then click Escalate to case at the top right of the Overview tab. In this window, you have the option to either link the alert to an existing case or create a new case for association. → There is a dropdown with the available cases sorted by case ID. After selecting one, you can keep using the dropdown to select as many as you need. To remove them from your selection, simply click the X on each of them. → If you choose to create a new case, there are some fields you need to fill out.Case type required: this dropdown allows you to choose between the available types previously configured. New types can be created in the Case configuration area. Title required: give it a meaningful name that allows to easily identify its purpose or context. Description: use this field to provide as many details as possible about the case and its context. Assignee: this dropdown allows you to choose between the existing users in this domain to asume the responsibility for this case and its resolution. Case priority required: choose the level of importance of this case in terms of the urgency required for solving it (Very high, High, Normal, Low, Very low).
 When the escalation process is complete, a message pops up. Inside the message you have a button to access the cases in the Cases area and further configure them or examine them (more info about the Cases area in this link).  |
Associate several alerts with a case in bulk
...
There is also a button to access them in the Cases area to further examine or configure them (more info about the Cases area in this link).
...
You can also check associated cases in the alert details window (more info here). Simply click the alert ID to open it and you will see them at the top right of the overview tab.
...
This can be also done from the alert details window (more info here). Simply click the alert ID to open it and click the Disconnect button of the corresponding case at the top right of the overview tab.
...
