- Case Manager Release Notes
- Get Started with Case Manager
- Configure Case Manager Settings
- Investigate a Security Incident
- Manually Create an Incident
- Edit an Incident
- Delete an Incident
- Manually Add an Entity
- Manually Add an Artifact
- Delete an Entity or Artifact
- Add Advanced Analytics Evidence to a Case Manager Incident
- Manage Tasks During an Investigation
- Send Messages from an Incident
- Filter Incidents
- Search for an Incident
- Sort Incidents
- Export Incidents
PrevNext
Add an Incident Feed
If you've added an incident source, specify the type of data to query from the source.
Ensure that you added an incident source.
In the sidebar, click SETTINGS
, then select Core.Under INCIDENT INGESTION, select Incident Feeds.
Click Add a new incident feed
.Fill in the fields, then click SAVE.
Click RESTART LOG INGESTION ENGINE.
Choose to restart the log engine immediately or specify a date, then click RESTART.