Thehive: Custom severity levels for alerts and cases
Request Type
Feature Request
Problem Description
Currently, the severity level of alerts and cases is hardcoded to the values Low, Medium and High. We would love to have these customizable because our current SOC processes support more than those three values (i.e. there is also "Info only" and "Critical").
woifi
All 11 comments
+1, We have a P0-P3 scheme and would like the additional support for defining custom severity/priority levels
Viper896
on 10 Nov 2017
We also need custom / more severity levels 馃憤
frikky
on 5 Dec 2017
Same for us !
infsy
on 7 Dec 2017
Custom severity :+1:
Interested in that feature too.
francoisihry
on 11 May 2018
I think allow users to display their own metrics in the cases list and allow them to sort the cases by the metrics would fix the need just fine.
francoisihry
on 11 May 2018
Is being able to customize severity levels still being pursued?
raadtim
on 6 Dec 2018
Yes, please!
inodee
on 4 Mar 2019
This would be great!
flyuk
on 21 Nov 2019
939 adds Critical severity :)
zpriddy
on 5 Dec 2019
4.0.0-RC1 has already added a Critical severity. I don't think an Info severity is meaningful.
Any thoughts?
nadouani
on 17 Mar 2020
I think introducing critical as 4th severity is very helpfull.
Thanks a lot for that.
But i think we should not have to many severities, for me personally 4 are fully enough.
crackytsi
on 17 Mar 2020
Related issues
Xumeiquer
路
6Comments
vi-or-die
路
4Comments
shortstack
路
4Comments
crackytsi
路
5Comments
smogm
路
5Comments
Most helpful comment
Is being able to customize severity levels still being pursued?