Clarification on Alert Order in Merged Cases

If you move an alert to a new case, it will be ordered based on the alert timestamp (ex. if moved alert is oldest, it will show as first alert and if newest, it will show as last alert).

The moving of alerts is documented on the case wall, so you can tell via the audit event around the move on the wall.

Hi ​@cmorris , Thanks,

This behavior appears to be valid for automatically grouped alerts. However, for manually merged cases, the behavior seems to be different.

In the screenshot below, the fourth alert appears to be the earliest alert based on the timestamp and would therefore be expected to appear first.

Sorry, I was moving alerts from one case to another in my testing as opposed to merging the cases. I will double check with the team and get back to you.

​@VictorSOAR - For now, it looks like your initial observation is the behavior - parent case alerts first - I spoke with product and then we created a request to change this to be based on the timestamp, like when alerts are moved. The request number is 546006817, you can check the status with your account team or via a support case.

Thanks for checking on this and creating a request ​@cmorris! Appreciate the update. 

Thanks for checking on this and creating a request ​@cmorris ! Appreciate the update.