Naming a case (Admin)

Supported in:

Google SecOps SOAR

As an admin, you can set the conditions by which Google Security Operations will know what name to give a case.
In this screen are five fields – Google Security Operations matches each case with the first field name. If there is no match, Google Security Operations moves to the next field.

To add a case name:

1. Navigate to Settings > Case Data > Case Name.
2. Place your cursor in the square brackets.
3. You can choose to enter a fixed text or alternately, click on the brackets on the right of the field. The Insert Placeholder dialog box opens.
4. Select from the Alert, Case, Event or Dynamic Environment Parameters menus. Once selected, the field is automatically updated.

   

5. Repeat as required.