Skip to content

How to Close a Case#

This topic provides step-by-step instructions for closing a case in TheHive.

Close the case when the investigation is complete.

Pending tasks

Closing a case also permanently closes all pending tasks. This action can't be undone.

Required permissions

Only users with the manageCase/update permission can close cases in TheHive.

Procedure

  1. Find the case you want to close.

  2. In the case description, select .

    Close a case

  3. In the Close case drawer, select the status that reflects the outcome of the investigation.

  4. Enter a summary describing the outcome of the investigation.

    5.5 You can add a full-size image by dropping it into the Summary field or selecting the symbol.

    Wait for the upload to complete

    Wait until the image path appears in parentheses. If it doesn’t, the upload is still in progress, and the image won’t display as expected.

  5. Add or remove values in custom fields as needed.

    Custom fields completion

    You must complete all mandatory custom fields to close a case.

  6. Select Close tasks and case.

Next steps