Simulating Multiple Events in Alert within a Case

[jaymin]

Hello SOAR Community, 

I'm testing a scenario that involves simulating multiple events within an Alert in a case. However, the "Simulate Case" feature currently only allows me to create a single event.

Can you please advise on how to create multiple events with specific fields in each event, so I can comprehensively test my scenario?

[ylandovskyy · Accepted solution]

Hey @jaymin ,

The easiest way to do that is to export the existing "simulated case" and then adjust it to your needs. This will give you a real representation of the expected object and then you can use it to understand, how to add more events under the alert. Let me know, if this helped.

[jaymin]

Thanks @ylandovskyy, your solution worked. Thanks for your help.