Content Comparison

...

You also need the Case management permission to link alerts to new or existing cases. Failing to meet this requirement will result in an error when accessing the case management menu (more info about managing roles and permissions here).

...

...

Rw ui steps macro

Rw step Status title From the ellipsis menu → You can start associating alerts to cases using the Escalate to case option in the ellipsis menu at the end of the row. Image Removed Status title from the case menu → You can also click on the folder tray icon at the end of the row and then select Escalate to case from the case management menu that appears. Image Removed Status title from the alert details window → Another possibility is to access the alert details window (more info here). Simply click the alert ID to open it and then click Escalate to case at the top right of the Overview tab. Image Removed Rw step In this window, you have the option to either link the alert to an existing case or create a new case for association. Status title Existing case → There is a dropdown with the available cases sorted by case ID. After selecting one, you can keep using the dropdown to select as many as you need. To remove them from your selection, simply click the X on each of them. Image Removed Status title add new case → If you choose to create a new case, there are some fields you need to fill out. Case type required: this dropdown allows you to choose between the available types previously configured. New types can be created in the Case configuration area. Title required: give it a meaningful name that allows to easily identify its purpose or context. Description: use this field to provide as many details as possible about the case and its context. Assignee: this dropdown allows you to choose between the existing users in this domain to asume the responsibility for this case and its resolution. Case priority required: choose the level of importance of this case in terms of the urgency required for solving it (Very high, High, Normal, Low, Very low). Image Removed Rw step When the escalation process is complete, a message pops up. Inside the message you have a button to access the cases in the Cases area and further configure them or examine them (more info about the Cases area in this link). Image Removed

Associate several alerts with a case in bulk

You can also associate several alerts at the same time with a case. Simply mark their checkboxes and use the Bulk actions menu next to the master checkbox. Then, follow the procedure described in the section above from step 2.

...

Accessing associated cases

Alerts with cases associated can be easily identified by the change in the folder tray icon, which becomes darker and displays a blue bubble with the number of cases associated. If you click it, the associated cases window opens, and you can see the names and IDs of the cases,

There is also a button to access them in the Cases area to further examine or configure them (more info about the Cases area in this link).

...

You can also check associated cases in the alert details window (more info here). Simply click the alert ID to open it and you will see them at the top right of the overview tab.

...

Disconnecting cases from alerts

In the associated cases window, you also have a button to disconnect the cases you no longer need to be associated with the alert in question.

...

This can be also done from the alert details window (more info here). Simply click the alert ID to open it and click the Disconnect button of the corresponding case at the top right of the overview tab.

...

How can alerts and cases work together?