Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Alert id should not be used to build case title when using case templates #364

Closed
srilumpa opened this issue Nov 6, 2017 · 2 comments
Closed
Assignees

Comments

@srilumpa
Copy link

srilumpa commented Nov 6, 2017

Request Type

Feature Request

Currently, the id of the alert is used to prepended to the alert title when creating the case using the "createCase" API command with a case template. This can generate case titles quite cryptic depending of what is used as alert ids (combination of timestamps, file hashes, hostnames, usernames, etc).

Could it be possible to remove those ids from the title ? A solution would be to have a checkbox in the case template to toggle the use of alert id to generate the case title.

@saadkadhi saadkadhi added this to the 3.2.0 milestone Nov 6, 2017
@To-om To-om modified the milestones: 3.2.0, 3.0.0 Nov 14, 2017
@To-om
Copy link
Contributor

To-om commented Nov 14, 2017

The ID of the alert has been removed by 89413ff

@To-om To-om closed this as completed Nov 14, 2017
@srilumpa
Copy link
Author

From the name of the modified file in the commit, this is applying only to cases created from MISP events, isn't it? My issue was more global and was wondering if it was possible not to display the alert id in the case title for all type of cases or according to a setting in a caseTemplate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants