How to Edit Multiple Observables

This topic provides step-by-step instructions for performing bulk edits on multiple observables in TheHive.

Required permissions

Only users with the manageObservable permission can manage observables in TheHive.

Procedure

1. Locate the case or alert where you want to update the observables.

2. In the description, select the Observables tab.

   

3. Select next to the observables you want to update.

4. Select .

5. In the Edit several observables drawer, update the values as needed.

6. Select Submit.

Next steps

• Add an Observable
• Remove an Observable
• Update the Status of an Observable
• Pin an Observable
• Export Data from Observables
• Run Analyzers on an Observable
• Run Responders on an Observable
• Import Observables from Analyzer Reports