> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Managing Cases

> Manage case lifecycle operations including assignment, status changes, and bulk actions in Blink.

<Note>**Note**:The images below serve as examples of the general case management table's layout. However, **all** tables interfaces in the 'Case Management' feature include all the below to simplify the management of the Case Management interface.</Note>

***

The Case Management interface includes multiple interconnected tables, [Cases](/docs/case-management/cases/cases), [Alerts](/docs/case-management/alerts/alerts), [Attachments](/docs/case-management/attachments/attachments), [Observables](/docs/case-management/observables/observables), and [Tasks](/docs/case-management/tasks/tasks), each designed to help you track and respond to security incidents with precision.

This section of the documentation explains the universal features available across all tables in the Case Management interface. Regardless of which table you are viewing, you can access the same set of management tools to organize, filter, and take action on records efficiently.

<Note>
  All table data is securely stored in an encrypted Amazon RDS instance. Each customer's data is isolated within a dedicated PostgreSQL schema, and all encryption is managed using [AWS Key Management Service (KMS)](https://aws.amazon.com/kms/).

  For customers who purchased Blink through the [Azure Marketplace](https://azuremarketplace.microsoft.com/en-us/marketplace/apps?search=blink\&page=1) or have specifically requested Azure services, all table data is securely stored in an encrypted [Azure Database for PostgreSQL](https://azure.microsoft.com/en-us/products/postgresql). Each customer’s data is isolated in a dedicated PostgreSQL schema, with encryption fully managed by Azure to ensure data security and compliance.
</Note>

***

## Select Multiple Records

Quickly take action on multiple cases.
You can select multiple cases using the checkboxes next to each row in the table. Once selected, a floating toolbar will appear at the top of the screen, allowing you to:

* Change the status of selected cases
* Export selected cases to CSV
* Delete selected cases

<Frame>
  <img src="https://mintcdn.com/blinkops-2/a1zzdVRAg2RBMsIZ/img/CaseManagement/MultiSelectTable.png?fit=max&auto=format&n=a1zzdVRAg2RBMsIZ&q=85&s=e00e8ba16db5b329d26a42ef3c81ae11" width="3788" height="1972" data-path="img/CaseManagement/MultiSelectTable.png" />
</Frame>

***

## Pending Question Notifications

<p>In the top-right corner, click the <Icon icon="bell" /> to view all questions submitted through the [Ask a Question on a Case](/docs/case-management/case-management-workflow-actions/case-actions#ask-a-question-on-a-case) action. Each question is tied to a specific case. Clicking on a pending question will take you directly to that [case’s overview](/docs/case-management/cases/case-overview#ask-a-question-on-a-case), where you can review the details and provide your response. </p>

<Frame>
  <img src="https://mintcdn.com/blinkops-2/HVbFDHntPhzTWRp_/img/CaseManagement/PendingQuestion.png?fit=max&auto=format&n=HVbFDHntPhzTWRp_&q=85&s=2e1ac0c7ddb1b4964b3ab788096211f0" width="1726" height="1077" data-path="img/CaseManagement/PendingQuestion.png" />
</Frame>

***

## Responses

The Response field allows you to configure and trigger incident response workflows for each table. These workflows can be tailored to match your operational needs for Cases, Alerts, Attachments, Observables, and Tasks.

<Accordion title="Instructions: Configuring The Response Field" icon="plus">
  The 'Response' field enables you to add incident response workflows, customized for each table of the Case Management interface. The workflows associated with a table can be then activated by Case Management users.

  <Steps>
    <Step>
      <p>Select the <Icon icon="square-ellipsis-vertical" iconType="solid" /> icon and an **edit** option will appear.</p>

      <Frame>
        <img src="https://mintcdn.com/blinkops-2/wrPfqyb0-QUMOKmy/img/CaseManagement/response-options.png?fit=max&auto=format&n=wrPfqyb0-QUMOKmy&q=85&s=eac375e02f40951b704fd0617068c123" width="3584" height="2062" data-path="img/CaseManagement/response-options.png" />
      </Frame>
    </Step>

    <Step>
      A popup will appear with the option to 'Add Action'.

      <Frame>
        <img src="https://mintcdn.com/blinkops-2/wrPfqyb0-QUMOKmy/img/CaseManagement/action-addition.png?fit=max&auto=format&n=wrPfqyb0-QUMOKmy&q=85&s=71c72f7adaa88665f42149d4fec2e83a" width="3568" height="2045" data-path="img/CaseManagement/action-addition.png" />
      </Frame>
    </Step>

    <Step>
      Proceed to select the 'Add Action' option and give the new action a name, choose the desired Workflow, enable for types and then click the apply configuration button.

      <Frame>
        <img src="https://mintcdn.com/blinkops-2/wrPfqyb0-QUMOKmy/img/CaseManagement/save-action.png?fit=max&auto=format&n=wrPfqyb0-QUMOKmy&q=85&s=093436f4e071fbf4f53ed5c9dc402c3a" width="3578" height="2056" data-path="img/CaseManagement/save-action.png" />
      </Frame>
    </Step>

    <Step>
      You will have the choice to either add another action or save the one you just made.

      <Frame>
        <img src="https://mintcdn.com/blinkops-2/wrPfqyb0-QUMOKmy/img/CaseManagement/response-actions.png?fit=max&auto=format&n=wrPfqyb0-QUMOKmy&q=85&s=132b5af7ccda3256ffad04ffed5adbae" width="3584" height="2058" data-path="img/CaseManagement/response-actions.png" />
      </Frame>
    </Step>

    <Step>
      Once completed and saved, you can then trigger all the workflow actions within the dropdown menu for actions.

      <Frame>
        <img src="https://mintcdn.com/blinkops-2/wrPfqyb0-QUMOKmy/img/CaseManagement/response-example.png?fit=max&auto=format&n=wrPfqyb0-QUMOKmy&q=85&s=b436a835b53f9e7fe32254fb89310ff0" width="3584" height="2060" data-path="img/CaseManagement/response-example.png" />
      </Frame>
    </Step>
  </Steps>
</Accordion>

***

## The Search Bar

Quickly find records by name, tags, and other metadata. Use the search to find records by entering keywords such as case names, tags, vendors, or overviews.

<Note>Searchable fields include Name, Vendors, MITRE mappings, Tags, Close Reasons, and Overviews. Supported data types include Text, Single-Select, Multi-Select, and List.</Note>

<Frame>
  <img src="https://mintcdn.com/blinkops-2/wrPfqyb0-QUMOKmy/img/CaseManagement/search-bar.png?fit=max&auto=format&n=wrPfqyb0-QUMOKmy&q=85&s=c4c4a5bd8a56660213ff8970453fdba2" width="3582" height="2058" data-path="img/CaseManagement/search-bar.png" />
</Frame>

***

## Refresh Button

All tables in case management refresh automatically every **5 minutes** by default, ensuring the data stays up to date. You can customize this interval to match your needs by selecting one of the following refresh options:

* 30 seconds
* 1 minute
* 5 minutes
* 15 minutes
* 30 minutes
* 1 hour

To see when the data was last updated, hover over the **Refresh** button in the top-right corner of the table. You can also click the button at any time to manually refresh the data instantly.

<Frame>
  <img src="https://mintcdn.com/blinkops-2/6-V1ThH1obaIgUU-/img/CaseManagement/refresh-button.png?fit=max&auto=format&n=6-V1ThH1obaIgUU-&q=85&s=899f129dd5eeca061a9394215f447805" width="1719" height="1080" data-path="img/CaseManagement/refresh-button.png" />
</Frame>

***

## The View Button

<p>The table contains additional fields, but only a few are initially visible by default. Click on the <Icon icon="eye" color="gray" /> icon above the table, to configure which table field columns you want to make visible and choose which table field columns you want to remain hidden. </p>

<Frame>
  <img src="https://mintcdn.com/blinkops-2/BRfSL_EOO1Uh43ic/img/CaseManagement/FilterTable.png?fit=max&auto=format&n=BRfSL_EOO1Uh43ic&q=85&s=21ce4f4dba73a08818e4b28df15995b2" width="3562" height="2055" data-path="img/CaseManagement/FilterTable.png" />
</Frame>

***

## The Filter Button

The 'Filter' button simplifies filtering through case(s) by applying conditional statements to find the specific case(s) you are looking for.

<Frame>
  <img src="https://mintcdn.com/blinkops-2/wrPfqyb0-QUMOKmy/img/CaseManagement/conditional-filter.png?fit=max&auto=format&n=wrPfqyb0-QUMOKmy&q=85&s=344f434bbdc4286fd0546b73a5365ada" width="3584" height="2054" data-path="img/CaseManagement/conditional-filter.png" />
</Frame>

## Table Views

Create and manage personalized or shared table views.

Each table offers pre-configured views (e.g., All Cases, My Tasks, Critical Alerts) and lets you create custom views with filters and layout preferences.

<Accordion title="Instructions: Configuring Table Views" icon="table-layout">
  <Steps>
    <Step title="Navigate to the Dropdown Menu">
      In the dropdown menu in the top-left corner, you will find out of the box options for reviewing your case: all cases, my cases, high & critical severity, or closed cases.

      <Frame>
        <img src="https://mintcdn.com/blinkops-2/sb7Z70HzlwQjgWp7/img/CaseManagement/TableViews.png?fit=max&auto=format&n=sb7Z70HzlwQjgWp7&q=85&s=ebcbbd082f93209b73de7eb6860364c2" width="3584" height="1990" data-path="img/CaseManagement/TableViews.png" />
      </Frame>
    </Step>

    <Step title="Customize Table View- Public, Private and Locked View">
      To create a custom table view, click 'Add View' and enter a name for your new view.

      * **Private View**: When selected, the view is only visible to the creator and hidden from other users. If left unchecked, the view is public and can be accessed and modified by all users.

      * **Locked view**: When checked, the view will be visible to all users, but only [Case Management Admins](/docs/case-management/permissions#workspace-scope-permissions) will be able to make changes to it.

      <Tip>To make changes to a view when **Locked View** is enabled, a user must have the `case_management:admin` permission.</Tip>

      <Frame>
        <img src="https://mintcdn.com/blinkops-2/a1zzdVRAg2RBMsIZ/img/CaseManagement/ManageViews.png?fit=max&auto=format&n=a1zzdVRAg2RBMsIZ&q=85&s=488d0c7fca3be9278e9fc1d9ef06ea06" width="1728" height="1085" data-path="img/CaseManagement/ManageViews.png" />
      </Frame>
    </Step>

    <Step title="Create Conditional Statements">
      <p>Proceed by creating a conditional statement you would like to apply to the table view you just created. You can also click on the <Icon icon="eye" /> icon to choose which columns you would like to display, drag columns to change their order in the table or sort the columns by hovering over the column headers and clicking the up or down arrow. Then click "Save View." </p>

      <Frame>
        <img src="https://mintcdn.com/blinkops-2/jkJg6KPC0uV-ty21/img/CaseManagement/ConditionalStatementView.gif?s=812da7dfa43493d4404da545892db6d7" width="1292" height="720" data-path="img/CaseManagement/ConditionalStatementView.gif" />
      </Frame>

      <p> You can also edit the Table View you created by clicking on the dropdown menu and selecting the 'Manage View' option. To make any changes, click the "Manage View" button. If you want to delete the view you created, click the <Icon icon="X" /> button. </p>

      <Frame>
        <img src="https://mintcdn.com/blinkops-2/wrPfqyb0-QUMOKmy/img/CaseManagement/UpdateView.gif?s=156c0dd70d4577539f1a72e7e6801673" width="1936" height="1080" data-path="img/CaseManagement/UpdateView.gif" />
      </Frame>
    </Step>
  </Steps>
</Accordion>

***

## Filter Custom Tables by Case Type.

In your Custom Table, if you choose to display the "Linked Cases" column, you can configure it to filter the table by a specific Case Type.

<Steps>
  <Step title="Show the Linked Cases Column">
    <p>After creating your Custom Table, click the <Icon icon="eye" />button and check the box next to the "Linked Cases" field. This will display the "Linked Cases" column in your Custom Table. </p>

    <Frame>
      <img src="https://mintcdn.com/blinkops-2/sb7Z70HzlwQjgWp7/img/CaseManagement/SelectLinkedCases.png?fit=max&auto=format&n=sb7Z70HzlwQjgWp7&q=85&s=e5ee68cba5ecdad8731cdc6bc90cbbe4" width="3788" height="1883" data-path="img/CaseManagement/SelectLinkedCases.png" />
    </Frame>
  </Step>

  <Step title="Filter by Specific Case Types ">
    <p> Next, click the <Icon icon="square-ellipsis-vertical" iconType="solid" /> icon next to "Linked Cases" and select "Edit." A popup will appear. In the "Filter By Type" section, check the box next to the Case Types you want to filter the Custom Table by. If you do not select a Case Type under "Filter By Type" section, the Custom Table will be presented on **all Cases**.</p>

    <Frame>
      <img src="https://mintcdn.com/blinkops-2/BRfSL_EOO1Uh43ic/img/CaseManagement/FilterByCase.gif?s=c400c3a8d5f672964b2997d7f8198c6e" width="1940" height="1080" data-path="img/CaseManagement/FilterByCase.gif" />
    </Frame>
  </Step>

  <Step title="View the Filtered Table in Case Overview ">
    When viewing a Case, your Custom Table will now only appear as a separate tab **if the Case’s Case Type matches** one of the types you selected in the previous step.

    <Frame>
      <img src="https://mintcdn.com/blinkops-2/jkJg6KPC0uV-ty21/img/CaseManagement/CustomTable.gif?s=f123bd388c8166f2b83e932e9738a754" width="1944" height="1080" data-path="img/CaseManagement/CustomTable.gif" />
    </Frame>
  </Step>
</Steps>
