Naming a Case (Admin)
As an admin, you can set the conditions by which Chronicle SOAR will know what name to give a case.
In this screen are five fields – Chronicle SOAR matches each case with the first field name. If there is no match, Chronicle SOAR moves to the next field.
To add a Case Name:
- Navigate to Settings > Case Data > Case Name.
- Place your cursor in the brackets.
- You can choose to enter a fixed text or alternately, click on the brackets on the right of the field. The Insert Placeholder dialog box opens.
- Select from the Alert, Case, Event or Dynamic Environment Parameters drop-down lists. Once selected, the field is automatically updated.
- Repeat as required.