By default in the Web Console, Entity separation for case management is disabled. Users must enable this functionality in the Configuration Manager.
Enable Entity Separation in the Configuration Manager
-
Open the LogRhythm Configuration Manager.
-
On the left side, click Web Services.
-
At the bottom, next to Advanced View, click Show.
Advanced settings appear. -
Next to Enable Entity Selection on Cases, click On.
-
Next to Enable Case Entity Separation Enforcement, click On.
-
Click Save.
Now you can create separate Cases based on Entity. For more information, see Create New Cases.