Skip to content

Prevent Users from Merging Alerts into Closed Cases#

This topic provides step-by-step instructions for deactivating the ability to merge alerts into closed cases in TheHive.

A closed case is one with a status assigned to the Closed stage.

By default, it's possible to merge alerts into a closed case. Use this procedure to restrict merging alerts into cases statuses linked to the New or In progress stages.

Required permissions

Only users with the manageConfig permission can deactivate merging alerts into closed cases in TheHive.

Procedure

  1. Go to the Organization view from the sidebar menu.

    Organization view

  2. Select the UI Configuration tab.

    UI configuration

  3. In the Alert and case section, turn on the Merge alerts into closed cases toggle.

  4. Select Confirm.

Next steps