All versions of this manual
X
Welcome to Linkurious user manual v3.1.15. Use the menu to access other documentations.
  1. Introduction
  2. First visualization
    1. At first glance
    2. Create a new visualization
    3. Inspect data
  3. Custom actions
  4. Search
    1. Searching for nodes
    2. Searching for edges
    3. Advanced search
    4. Advanced syntax
  5. Manipulating the graph
    1. Select nodes and edges
    2. Expand nodes
    3. Edge Grouping
    4. Queries and templates
    5. Lasso
    6. Hide
    7. Layouts
    8. Pinning nodes
    9. Undo/redo
    10. Shortcuts
  6. Design
    1. Captions
    2. Nodes color
    3. Edges color
    4. Nodes size
    5. Edges size
    6. Icons
  7. Filters
    1. Filter panel
    2. Timeline
  8. Edit data
    1. Edit properties and categories
    2. Create nodes and edges
    3. Delete nodes and edges
  9. Geography
    1. Geographic data
    2. Display a geographic map
  10. Manage visualizations
    1. Auto-save
    2. Organize
    3. Duplicate
    4. Share
    5. Publish
    6. Export
    7. Delete
  11. Alerts
    1. Alerts unified case list
    2. Alerts dashboard
    3. Case list
    4. Case investigation
  12. Guest Mode
 

Alerts: Case list

The "Case List" shows a list of newly detected cases for each alert. Each row in the list is a case.

By default, cases are ordered by creation date. You can change sorting order by using custom columns, if the alert creator has defined any.

A case has a status that is either Open, In progress, Confirmed, or Dismissed. New cases have the Open status by default.

The list of cases can be filtered by status. For example, the image below shows the list of dismissed cases. We can also see who has changed the status of those cases.

You can also filter the list of cases by assignee. In the example below, we can see all the cases opened and assigned to the current user.

If a user has no cases assigned to him, his name will appear greyed out in the list.

Within the list of cases, you can assign them to users that have the right to process the alert.

To do so, you can select cases from multiple pages by checking the checkbox on the left of every row.

You can also select all the cases within a page by clicking on the checkbox on top of the list of cases.

Once cases are selected, you can assign them to a single user by clicking on the button "Assign".

To take a decision, you must investigate on a case. Simply click on the ID of a case to open the case view.

Download the alert case list information

From each alert's case list view, users can download an excel file containing all the cases of the alert. This file contains information which will enable analysts to monitor the team's activity, share it with fellow colleagues and answer possible questions a they may have, such as:

  • How many cases are in which state?
  • How many cases are assigned per analyst?
  • How many cases dows analyst X close per period?
  • What relevant information is associated with the cases?
  • How long does it take for a case to be closed?
  • How long does it take for a case to be closed by an analyst?

The file begins to download once the button is pressed. In the downloaded file, for each case, you will find its id, creation datetime, status, assignee username, assignee email, assigned datetime, dismissed or confirmed datetime, the alert name and folder name the case belongs to and the columns as well as the export datetime.