Skip to content

Prevent Users from Merging Alerts into Closed Cases#

manageConfig

By default, TheHive allows users to merge alerts into closed cases.

You can deactivate this capability to prevent modifications to cases that have been completed.

A closed case is any case with a status assigned to the Closed stage.

Procedure

  1. Go to the Organization view from the sidebar menu.

    Organization view

  2. Select the UI Configuration tab.

    UI configuration

  3. In the Alert and case section, turn on the Merge alerts into closed cases toggle.

  4. Select Confirm.

Next steps