Create New Cases

To create a new case:

1. Depending on the Web Console page where you are working, do one of the following:

   1. On the Dashboards page, Alarms page, or Analyze page:

      1. Open the Current Case panel (if necessary).

      2. At the bottom of the Current Case panel, click New Case.

   2. On the navigation bar, click Threat Center, and then click Cases:

      1. In the upper-right corner, click the Add Case icon.

   3. On the navigation bar, click Threat Center, and then click Alarms. To add a single alarm:

      1. Click an alarm card or alarm row to select it. The Inspector panel opens.

      2. In the Alarm Actions section, click New Case.

   4. On the navigation bar, click Threat Center, and then click Alarms. To add multiple alarms:

      1. Select the check boxes of the alarms you want to add.

      2. Click the Add to Case icon in the bulk action bar.

      3. Click Create New Case. When you create a case based on multiple alarms, the Name, Priority, and Due Date are auto-populated based on the information of the first alarm selected.

2. In the dialog box, enter or adjust the information for Name, Priority, Due Date, Entity, and Summary.

3. Click Save.
   The new case is created and added to the lists of open cases in the Current Case panel and Cases page.