- Get Started with Threat Center
- Group Detections
- Work on Cases
- Triage Alerts in Threat Center
- Edit and Collaborate in Threat Center
- Find Cases or Alerts
- Build a Search in Threat Center
- Enter a Search Using Exabeam Query Language in Threat Center
- Enter a Search Using Natural Language in Threat Center
- Run a Recent Search in Threat Center
- Create a New Saved Search in Threat Center
- Run a Saved Search in Threat Center
- Edit a Saved Search in Threat Center
- Delete a Saved Search in Threat Center
- Sort Cases or Alerts
- View Case and Alert Metrics
- Get Notified About Threat Center
PrevNext
Create a Threat Center Queue
To define a group of users responsible for responding to cases, create a queue.
In Threat Center, click Settings, then navigate to the Customizations tab.
Click Manage Queues.
Click + New Queue.
Under the QUEUE NAME column, enter a unique, alphanumeric queue name between four and 32 characters. You can't rename the queue after you save it.
Under the USERS column, add users to the queue:
To add a user, click the arrow, then select a user. Only users with the read, write, and delete permission for Threat Center cases are available.
To search for a user, start typing.
To remove a user, click the x next to their name. If they're the assignee on an existing case, they remain the assignee on that case.
To save the queue, click
.