We are using external system to manage security incidents that registered at ESM by Rule firings.
As one of rule actions we set up case creation. Then with Case Search Group feature we export cases to external system, and do no more operations with cases at ESM side. So in that situation we have a lot of opened Cases in ESM resources.
Now we have to delete cases from console manualy. It uncomfortable to delet a lot of cases whent it more than 1000.
It will be nice to have ability to set Case TTL when case creating with rule action or something else to automate case deleting process.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.