Configure case naming conventions

This document explains how administrators can configure case names in Google Security Operations. As an administrator, you can control how Google SecOps names cases. On the SOAR Settings > Case Data > Case Name page, there are five fields. Google SecOps tries to match each case with the name in the first field. If there's no match, it moves on to the next field until it finds one.

To add a case name, follow these steps:

1. Go to Settings > Case Data > Case Name.
2. Place your cursor inside the square brackets of the field.
3. Either manually enter fixed text, or click the brackets next to the field to open the Insert Placeholder dialog.
4. In the Insert Placeholder dialog, select a placeholder from the Alert, Case, Event, or Dynamic Environment Parameters menu. Once selected, the placeholder is automatically inserted into the field.