Skip to content

How to Enrich Alert Details#

This topic provides step-by-step instructions for enriching alert details in TheHive.

Required permissions

Only users with the manageAlert/update permission can update an alert in TheHive.

Procedure

  1. Find the alert you want to enrich.


  2. Update the following fields:

    - Title

    The title of the alert.

    - Tags

    Relevant tags for labeling the alert.

    - Description

    A description of the alert using TheHive-flavored Markdown syntax.

    5.5 You can add a full-size image by dropping it into the Description field or selecting the symbol.

    Wait for the upload to complete

    Wait until the image path appears in parentheses. If it doesn’t, the upload is still in progress, and the image won’t display as expected.

    - Custom fields

    Custom fields for the alert, with or without predefined values.


  3. Select Confirm.

Next steps