unable to create cases

Sounds like it could be an issue with the connector. Have cases been created in the past or is this a new instance?

This is a relatively new instance. (also, not much looked at)

Hello ​@saru_26

Please check below things:

1. Rule Testing & Detections:
   First, confirm that your rule is generating detections. Try running the rule manually or validating it with test data. If detections are showing up during testing, that’s a good sign.

2. Alerts Visibility:
   After enabling the rule and turning ON alerting, check whether the alerts are actually appearing under the Alerts & IOCs section.

3. Connector Configuration:
   If alerts are being generated but no cases are being created, it's likely an issue with the connector. Please verify:

   • The connector is turned ON.

   • A Run Frequency is set.

   • The Service Account field is properly configured for your instance.

Any misconfiguration in the connector can prevent case creation, even if alerts are generated.

Hope this helps! Let me know how it goes or if you need help checking anything specific.

The connector also has test functionality. If you run it and share the output, we can take a look and see if there’s any errors.

-mike