You can now use custom tags for your cases and alerts using the tagging feature. This allows you additional flexibility to group and filter your investigations whether you are working at the alert level or case level.
To start, go to settings and add the tags for both cases and alerts as needed. We currently support string and enum data types.
Fig 1: Adding case tags in settings
Fig 2: Adding alert tags in settings
To actually tag cases, you can do it through a case view as follows:
Fig 3: Tagging a case
Once a case is tagged, it will show up on the case as follows:
Fig 4: Tags on a Case detail view
You can filter for cases with a specific tag using the list view in the following way:
Fig 5: Filtering for cases with tags
To actually tag alerts, you can do it through the alert view as follows:
Fig 6: Tagging a alert
Once an alert is tagged, it will show up on the alert as follows:
Fig 7: Tags on an Alert detail view
You can filter for cases with a specific tag using the list view in the following way:
Fig 8: Filtering for alerts with tags