Threat case management

Introduction

Threat case management is used to manage and classify the threat logs generated by the device. The device provides an alarm resource pool to store threat logs and allows users to add the logs to cases for ease of log management.

To manage threat cases:

1.     Click the Monitor tab.

2.     In the navigation pane, select Security Logs > Threat Logs. Select the target logs, and then click Add to alarm resource pool.

3.     In the navigation pane, select Threat Case Management. Click the Alarm Resource Pool tab to view logs for threat analysis.

4.     To add logs to a case, select the target logs, and click Add to case to add the selected logs to a case.

You can perform the following threat log management tasks on the Cases tab:

·     To archive a case, you can perform either of the following tasks:

¡     Select the case, and then click the Edit icon  for the case entry. In the dialog box that opens, select Archived from the Status field.

¡     Select the case, and then click Logs in the case entry. In the dialog box that opens, click Archive. Then, click Yes to confirm your operation.

·     To view the details of a case, click Logs in the case entry. In the dialog box that opens, you can also view the details of a log by clicking the Details icon  in the log entry.

·     To edit a case, click the Edit icon  for the case entry. In the dialog box that opens, edit the status of the case or remove logs from the case as needed.