Skip to content

Prevent Users from Merging Alerts into Closed Cases#

manageConfig

This topic provides step-by-step instructions for deactivating the ability to merge alerts into closed cases in TheHive.

A closed case is one with a status assigned to the Closed stage.

By default, it's possible to merge alerts into a closed case. Use this procedure to restrict merging alerts into cases statuses linked to the New or In progress stages.

Procedure

  1. Go to the Organization view from the sidebar menu.

    Organization view

  2. Select the UI Configuration tab.

    UI configuration

  3. In the Alert and case section, turn on the Merge alerts into closed cases toggle.

  4. Select Confirm.

Next steps