Link or unlink issues from a case

You can link or unlink issues from cases in Cortex XSIAM.

You can link and unlink issues from cases. An issue can be assigned to more than one case, and the case domain can be different from the issue domain.

If all issues are unlinked from a case, the case is deleted.

Link issues to a case

From the Issues page, select one or more issues that you want to link, right-click and select Manage Issue → Link to case. You can select one or more case to link the issues.

Unlink an issue from a case

From the Issues page, select the issue that you want to unlink, right-click and select Manage Issue → Unlink from case. You can select one or more cases to unlink the issue. You cannot bulk select issues to unlink.