Create cases to track and investigate security incidents efficiently with Torq.
Create a case manually by going to the Cases page and selecting Create Case.
Key Parameters for Case Creation
When setting up a case, you'll need to fill out several parameters to ensure all the relevant information is captured:
Parameter | Description |
Title | Assign a descriptive title to make the case easily searchable. Include key identifiers such as the incident type or involved vendors. |
Resolution SLA | Resolution Service Level Agreement. The duration in which the case should be resolved or closed. Disabling the SLA target toggle allows you to set the Resolution SLA without a target duration, allowing for flexible monitoring without fixed deadlines. |
Severity | Choose from predefined severity levels:
These align with the OCSF schema event severity identifier. For additional severities, contact Torq support. |
Description (optional) | Provide information that should be available to anyone reviewing the case. You can apply formatting to the case description by using markdown syntax. |
State | Select an appropriate state for the case, such as New, In Progress, On Hold, Resolved, or Closed. You can also integrate custom states tailored to your processes. |
Reporter | Automatically captured based on the creator of the caseâuser email for manual entries and workflow execution ID for automated creation. |
Assignee | The email address of the team member to whom the case is assigned. |
Category | Select a category from the suggestions list or create a custom category by typing it in. |