The following options are available:

Sort

Sort cases in the queue based on the following options:

  • Sort by ID (High to Low)
  • Sort by ID (Low to High)
  • Sort by Time Created (Newest to Oldest)
  • Sort by Time Created (Oldest to Newest)
  • Sort by Modified (Newest to Oldest)
  • Sort by Modified (Oldest to Newest)
  • Sort by Playbook Status (Success to Failure)
  • Sort by Playbook Status (Failure to Success)
  • Sort by Priority (High to the Low)
  • Sort by Priority (Low to the High)
  • Sort by SLA (Longest to shortest)
  • Sort by SLA (Shortest to Longest) SLA time

Switch between Side-by-Side View and List View

Analysts can choose to see the Cases in a List View, which provides a view of all open cases in a single space, allowing easy triage. The List View is also a unified space for sorting, filtering, customizing, and updating Case information. 

You can do the following in the List View:

  • Manage columns: Click the icon to hide or display specific columns that provide particular case details.
  • Apply Filters: Allows you to narrow your case search to precisely target the cases you want to work with. Once you apply a filter, it will be applied in both the List View and in the Side-by-Side View. For more information about filters, see Apply and Save Filters
  • Access Case: Click the Case ID number to drill down into a specific case. To go back into the List View from the Case, click on the arrow located to the left of the Case title in the Case Top Bar.
  • Create a Manual Case/Simulate Cases: Click theicon on the top right of the screen to Create a Manual Case or Simulate Cases.
  • Merge Cases: Select the Cases that you want to merge, then click theicon on the top right of the screen. For more information, see Merge Cases
  • Close Cases: Select the Case or Cases that you want to close, then click theicon on the top right of the screen. For more information about closing a case, see How to close Cases

Switch to Compact View

You have the option to switch to the compact view of the cases in the queue. It displays the case cards with the following information: playbooks, their status, alerts count, and the role assigned to it. This is useful when you want to have a quick glance at the cases in the case queue. 

Default View of the Case Card


To switch to Compact View, click on  icon.

Compact View of the Case Card 

Merge Cases

You can merge cases directly from the Case Queue (from both the Side-by-Side view and the List view). This allows you to easily review and consolidate the case information and determine which cases should be merged together. 

To merge Cases from the Side-by-Side view:

  1. Click on the icon.
  2.  Select the required cases in the Cases Queue. 
  3. Click on the icon. Then click Merge Cases.
  4. The Merge Cases dialog box opens. Select the parent case you want to contain the other merged cases. Then click Merge.

To merge Cases from the List view:

  1. Select the required cases in the Cases Queue.
  2. Click on the icon located in the top right of the screen.
  3. The Merge Cases dialog box opens. Select the parent case you want to contain the other merged cases. Then click Merge.