Forum Discussion

Brass Contributor

Mar 31, 2019

Cases not being created when rules fire

I have a handful of rules that I've created with the intention of creating cases. I know that they're firing because I get email notifications. However, I'm not seeing cases generated, nor does alert...

Valon_Kolica

Former Employee

Apr 01, 2019

PeterSchawacker:

@Ofer_Shezaf: Perhaps this maybe related to the previous topic of "Default Sentinel Overview dashboard widgets indicate no data. Where is the query for the map".

PS-SentinelHackers
Brass Contributor
Apr 03, 2019
Valon_KolicaThis seems to be completely different. Maybe an example of an email notification where the alert is failing to create a case would work. I have hundreds of them. Here's one:

Here are the alert configs...
Valon_Kolicaand Ofer_Shezaf , I'm pretty sure user error is at issue here. (Just a hunch.) What am I doing wrong? I'd be grateful for your advice.

Peter
PS-SentinelHackers
Brass Contributor
Apr 03, 2019
Valon_KolicaThis seems to be completely different. Maybe an example of an email notification where the alert is failing to create a case would work. I have hundreds of them. Here's one:

Here are the alert configs...
Valon_Kolicaand Ofer_Shezaf , I'm pretty sure user error is at issue here. (Just a hunch.) What am I doing wrong? I'd be grateful for your advice.

Peter