In the case details section, all the details about the case are found. Areas such as the tasks created within the case, the decisions that users ask / get information from each other, the explanations added as comments, the transactions done and to be done over the timeline, the users assigned to the case, the time to complete the case, and the files related to the case are included in the case details.
- You can do dependency, edit, and delete operations by clicking the three dots on the right of the case title.
- Dependency: It ensures that a case cannot be completed before another case is completed. From this section you can select which cases should be completed before this case.
- Edit: Use for change the case title.
- Delete: Use for delete the case.
- Related Cases: Use for list similar cases.
- Related Incidents: Use for list similar incidents.
- Complete: Use for complete the case. Before completing the case, completion status of all tasks is checked.
- Similar cases are checked depending on the Action object.
- Similar incidents are checked for the same action object and incident state.
- Incident details are also listed in the case.
- Emergency: Use for determine the urgency of the relevant case. When this option is clicked, a warning is sent to all users involved in the case. Prioritization of the tasks is requested in this case.
- Contributors: Users who will work on the case are listed in this section. A new user can also be included to the case from this section.
- Leader: User who monitors the case and organizes the division of working. A case can only have one leader.
- SLA: It is the section that shows how long the relevant case should be solved.
- Tags: Assigned to cases for reporting and evaluation of similar cases.
- Files: It is the section where the files related to the case are shared.
- Case Group: It is the section that organized for grouping cases of the same type. (E.G. Cases in the same project can be gathered in the same case group.)
- Incident Histogram: It is the section that shows the temporal movements of incidents. It is the area where information such as which incident occurred at what times of the day, or how many incidents occurred on which days in the last 7 days.
- Completed or incomplete alarms can be filtered in the task list.
- Finished tasks can be selected as completed.
- Tasks that created through playbooks will be completed automatically if no errors are encountered.
- Tasks can be created manually and assigned to your own user or to different users.
- Toogle Tag: Must be Split: Use for tag tasks that needs to be split.
- Toogle Tag: Must be Converted: Use for tag tasks that needs to be converted.
- Toogle Tag: Must be Descriptive: Use for tag that the relevant task description is not descriptive enough.
- Convert to Case: Use for convert the related task into a new separate case.
- Split Task: It is use for split the task.
- Edit Task: Use for edit the task.
- Set Dependency: Use for determine the task that must be completed before this task. (Related tasks)
- Delete Task: Use for delete the relevant task.
- Complete: Use for complete the relevant task.
- Tasks have other options than completed, such as incomplete or other.
- They are the processes that created to make a user decide about the case. (E.G. A decision can be made by the analyst to ask the team leader about the F/P status of the relevant case.)
- By clicking the "Answer" button, you can send your answer to a decision assigned to you
- The values added to the case as a table by playbooks can be pinned so that everyone can read / access it more easily.
- Pinned statuses will be displayed at the top of the case.
- All actions done in the case (adding comments, assigning a task, making a decision, etc.) are recorded on the timeline of the case. In this area, it is easy to track user's actions.
- You can manually trigger the events that previously defined with the "Dispatch" button at the bottom of the case. (E.G. you can easily remove an IP address that you think is blocked incorrectly from the firewall's block list)