Understanding how to interact with cases

[keso]

Hey, I'm working with Cases and Playbooks but have got trouble understanding some things. 

1. When using the "Siemplify_Assign Case_1" in Dynamic mode, how does the "automatically select the instance work" work? What is the decision to select one or another case? 

Regarding the case, what is the decision in SIEM to create a new case or group it in a similar case?

Thank you!

[AymanC]

Hi @keso,

I've not used this functionality, so can only go based on references. The references below should help!

[1] - https://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/specify-instance-in-dyna...

[2] -  https://cloud.google.com/chronicle/docs/soar/release-notes#November_09_2023

Kind Regards,

Ayman C