Troubleshooting

Check the troubleshooting information for tips about how to resolve problems with Case Management on QRadar platform.

Validating case creation and correlation events
If your cases do not contain case creation or correlation events, you can use search through all of the cases in your account to check if case creation and correlation events are occurring for incoming case candidates from QRadar platform.
Build and manage playbooks
The Playbook designer assists you in creating a playbook graphically based on your incident response or case management scenario.
Activation form
Use the activation form to have users enter data when they activate the playbook.
Cancelling a playbook automatically
You can configure a playbook to automatically cancel a running instance when specific conditions occur.
Sub-playbook
You can access all sub-playbooks from the playbook library. You can have multiple levels by nesting a sub-playbook within a sub-playbook. However, make sure to not repeat a sub-playbook in the path since it can cause a loop.
Writing scripts
Categories
Some IBM Security Orchestration & Automation features are dependent on other features; therefore, those permissions are combined. For example, setting the Ability to view and modify permission enables full permissions for the various administration and customization features listed below that permission.

Parent topic: Managing cybersecurity cases