Simulate Cases
Supported in:
You have the option to create a "ready made case" by simulating a case populated with system default alerts. Note: Simulated cases can be useful in staging environments or for trial purposes such as creating a demo. You can also create cases or import an existing case in a JSON format to use as a simulated case.
To simulate a case:
-
Click
Add and select Simulate Cases. - Select a case from the menu.
- Click Create.
To create a new case:
-
Click
Add, then click Simulate Cases. -
In the Simulate Cases dialog box, click
Add, then click Add New Case. -
In the Add New Case dialog box, enter the source Name, Rule Name (Rule
Generator), Alert Product, Alert Name, Event Name and if you choose,
additional Alert/Event fields.
- Click Save. Your new case now appears in the menu in the Simulate Cases dialog box.
- Select the case you added and click Create.
- Next, select the required environment and click Simulate. The new case will appear in the queue.
To import a case in a JSON file:
- Click Add, then click Simulate Cases.
- In the Simulate Cases dialog box, click Add, then click Import Case.
- Select the required case and click Open. The case is imported in a JSON format.