Use the Query cases step to retrieve cases based on specific criteria, enhancing your ability to automatically manage and analyze case data effectively. Customize your query with the step optional parameters to filter your search precisely.
Explore the Versatility of the Query cases step
Deduplication: Prevent duplicate case creation by checking for existing cases that meet your criteria.
Bulk Operations: Apply actions to multiple cases simultaneously, such as reassigning cases from one team member to another.
Threat Hunting: Identify all cases linked to a particular observable ID for targeted investigation.
Reporting and Analysis: Extract cases for detailed analysis, like identifying those nearing SLA breaches based on specific thresholds.
Optimize your search results with the Order and Order by parameters to sort the data based on specific property values, either in ascending or descending order.
Practical Application: Monitoring SLA Utilization
Practical Application: Monitoring SLA Utilization
For instance, retrieve a list of cases with 80% or more of their SLA consumed. Based on the case's particularities, this allows proactive reminders to be sent to the responsible assignees or triggering escalation protocols, such as alerting on-call engineers.
