Separate Entities in Cases
By default in the Web Console, Entity separation for case management is disabled. Users must enable this functionality in the Configuration Manager.
Enable Entity Separation in the Configuration Manager
Open the LogRhythm Configuration Manager.
On the left side, click Web Services.
At the bottom, next to Advanced View, click Show.
Advanced settings appear.Next to Enable Entity Selection on Cases, click On.
Next to Enable Case Entity Separation Enforcement, click On.
Click Save.
Now you can create separate Cases based on Entity. For more information, see Create New Cases.