Manage Tables
To view the Case Tables Runtime Limitations click here. Keep in mind that the Tables in Cases have the same runtime limitations as the tables in the workspace.
All tables in the Case Management feature include a search bar, a filter button, a refresh button, and a view button to simplify the management of your tables.
The Search Bar
In the Search bar, simply type the case name or a case overview for example to quickly locate the specific case you are looking for.
Regular text search on table fields includes Name, Vendors, Mitres, Tags, Close Reasons, and Case Overview, with field types including Text, Single-Select, Multi-Select, and List.
The Refresh Button
The page automatically refreshes every 5 minutes. You can check the last refresh time by hovering over the refresh button at the top. You can also manually refresh the page by clicking on the refresh button.
The View Button
The table contains additional fields, but only a few are initially visible by default. Click on the eye icon on the top-right above the table, to configure which table field columns you want to make visible and choose which table field columns you want to remain hidden.
The Filter Button
The Filter button simplifies filtering through case(s) by applying conditional statements to find the specific case(s) you are looking for.
The Summary Widgets
Above the tables, you will find the Summary Widgets, showing the total alerts ingested (line chart), the total number of alerts processed (line chart), the total number cases opened by severity (donut chart), the total number of closed cases (donut chart), the total number of cases categorized by type (bar chart) and whether the SLA status was met or exceeded (donut chart).
In the top right corner, click the bar chart icon. Then, check the box next to the Summary widgets you want to show, or uncheck it to hide any widgets you don't want displayed.
Adding Custom Column
In any Case Management Table, you can create and add your own Custom Record Column.
- To do this, click the '+' icon in the selected Table. Then, fill in the input parameters by providing a name for your column,choosing the column value type, and optionally entering a default value.
Clickable Tags in the "Linked Cases" Column
Clicking on the tags in the "Linked Cases" column in the selected Case Management table (such as the Cases Table, IOCs Table, Alerts Table, or Attachments Table) will open its Case Overview in a new browser tab.
Table Views
There is an option to manage table views by selecting or adding your own table management views.
- In the dropdown menu in the top-left corner, you will find out of the box options for reviewing your case: All cases, My Cases, High & Critical Severity, or Closed Cases .
You can also create your own table view by selecting the dropdown menu in the top-left corner, choosing the "Add View" option, and providing a name. If you want the table view to be private, check the corresponding box.
- If you check the box next to "Private" this view will be private to other users. Otherwise, it will be public to all users.
- Proceed by creating a conditional statement you would like to apply to the table view you just created. You can also click on the eye icon to choose which columns you would like to display, drag columns to change their order in the table or sort the columns by hovering over the column headers and clicking the up or down arrow. Then click "Save View."
- You can also edit the Table View you created by clicking on the dropdown menu and selecting the "Manage View" option. To make any changes, click the "Manage View" button. If you want to delete the view you created, click the "X" button.
