Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions explore-analyze/alerts-cases/cases/manage-cases.md
Original file line number Diff line number Diff line change
Expand Up @@ -138,3 +138,11 @@ To view a case, click on its name. You can then:
* Change the severity.
* Close or delete the case.
* Reopen a closed case.

## Search and filter by case ID [cases-id]

```{applies_to}
stack: ga 9.2
```

Existing and new cases are automatically assigned numeric IDs, which display after the case name. Use these IDs to quickly search and filter the Cases table. You can also use them for simplified tracking and collaboration when communicating about a case.
Original file line number Diff line number Diff line change
Expand Up @@ -98,4 +98,12 @@ To view a case, click on its name. You can then:
* Remove an alert.
* Refresh the case to retrieve the latest updates.
* Close the case.
* Reopen a closed case.
* Reopen a closed case.

## Search and filter by case ID [cases-id]

```{applies_to}
stack: ga 9.2
```

Existing and new cases are automatically assigned numeric IDs, which display after the case name. Use these IDs to quickly search and filter the Cases table. You can also use them for simplified tracking and collaboration when communicating about a case.
10 changes: 8 additions & 2 deletions solutions/security/investigate/open-manage-cases.md
Original file line number Diff line number Diff line change
Expand Up @@ -147,8 +147,6 @@ To explore the alerts attached to a case, click the **Alerts** tab. In the table
Each case can have a maximum of 1,000 alerts.
::::



### Add files [cases-add-files]

To upload files to a case, click the **Files** tab:
Expand Down Expand Up @@ -328,3 +326,11 @@ To import a case:
* If the imported case had attached alerts, verify that the alerts' source documents exist in the environment. Case features that interact with alerts (such as the Alert details flyout and rule details page) rely on the alerts' source documents to function.

::::

## Search and filter by case ID [cases-id]

```{applies_to}
stack: ga 9.2
```

Existing and new cases are automatically assigned numeric IDs, which display after the case name. Use these IDs to quickly search and filter the Cases table. You can also use them for simplified tracking and collaboration when communicating about a case.
Loading