Skip to content

How to Create a Case Template#

This topic provides step-by-step instructions for creating a case template in TheHive.

Duplicate an existing case template

Since version 5.4, you can duplicate an existing case template within your organization to quickly pre-fill fields and streamline the process.

To import an existing case template from another organization or TheHive instance, refer to the Import a Case Template topic.

Required permissions for managing case templates

Only users with the manageCaseTemplate permission can manage case templates in TheHive.

Procedure#

  1. Go to the Organization view from the sidebar menu.

    Organization view

  2. Select the Templates tab.

    Organization templates

  3. Select the Cases tab.

    Organization templates cases

  4. Two options are available:

    • Create a case template from scratch by selecting .

    • Duplicate an existing template by selecting next to the case template you want to duplicate, then select Duplicate (available since version 5.4).

  5. In the Adding a case template drawer, enter values in some or all the following fields to pre-fill:

    Prefix
    A prefix that's automatically added to case titles. The prefix value isn't visible when creating a case from the template but applies after creation. Use it to categorize cases for reporting.

    Name *
    The name of the case template. This name identifies the case template in the API.

    Display name
    The name that appears when users select this template to create a new case or to apply it to an existing case. If you don't specify a display name, the case template name is used.

    TLP *
    The TLP level for the case. It guides analysts on how they can share case information.

    PAP *
    The PAP level for the case. It guides analysts on how they can use case data.

    Severity
    The default severity level for cases.

    Tags
    One or more tags to categorize cases. Only tags defined in the taxonomies are available for selection.

    Description *
    A description for cases.

    Tasks
    One or more tasks for cases.

    Custom fields
    One or more custom fields for cases, with or without predefined values.

    Pages
    A page template to document cases.

  6. Select Confirm case template creation.

Next steps#