You have the option to create a "ready made case" by simulating a
case populated with system default alerts.
Note: Simulated cases can be useful in staging environments or for trial purposes such as creating a demo.
You can also create cases or import an existing case in a JSON format to use
as a simulated case.
To simulate a case:
Click addAdd and select Simulate Cases.
Select a case from the menu.
Click Create.
To create a new case:
Click addAdd, then click Simulate Cases.
In the Simulate Cases dialog box, click addAdd, then click Add New Case.
In the Add New Case dialog box, enter the source Name, Rule Name (Rule
Generator), Alert Product, Alert Name, Event Name and if you choose,
additional Alert/Event fields.
Click Save. Your new case now appears in the menu in the Simulate
Cases dialog box.
Select the case you added and click Create.
Next, select the required environment and click Simulate. The new case will
appear in the queue.
To import a case in a JSON file:
Click addAdd, then click Simulate Cases.
In the Simulate Cases dialog box, click addAdd, then click Import Case.
Select the required case and click Open. The case is imported in a JSON
format.