Overview
Attach events to a case to give reviewers a complete record of case activity and investigation progress.
Learn how to review events during a case investigation.
When to use
Automate event attachment to handle duplicate events. When a case already exists for a processed event, use a workflow to attach duplicate events to it. This maintains a complete record of case-related events without creating duplicate cases.
How to use
Attach an event to a case
Add the step: Add the Attach event to case step to a workflow.
Enter case ID: Enter the ID of the case to attach the event to.
(Optional) Enter Torq event ID: Enter the ID of an event other than the one triggering the workflow.
(Optional) Enter event name: Enter a label for simpler navigation of the events list.
Detach an event from a case
Add the step: Add the Detach event from case step to a workflow.
Enter case ID: Enter the ID of the case to detach the event from.
Enter Torq event ID: Enter the ID of the event to detach.