Create a test case
A Test Case allows you to treat a case like it's in a sandbox. Any actions that you perform on its entities do not influence entities in other cases. Test cases only contain the alert that was created in the event and uses existing data to populate it. You can use a test case to run the Playbook simulator on or test in the IDE screen.
- In the platform, navigate to the Cases screen.
- Drill down to a case and navigate to the Alert Tab.
- Click on the icon on the right side of the alert tab. The Alert Options menu appears, then click Ingest alert as test case.
- Select the required environment and click Simulate.
- Refresh the page and a Test Case appears in the Cases Queue on the left or in the List View table. It is marked with the label, Test, in the top right corner of the Case Card. The test case only contains one alert.
- You can now use this test case in the Playbook Simulator or in the IDE testing screen. Note that updating entity properties on a test case won’t influence the entity outside of the test case.