Actions85
- Alert Actions
- Asset Actions
- Case Actions
- Comment Actions
- Datastore File Actions
- Datastore Folder Actions
- Evidence Actions
- IOC Actions
- Manage Metadata Actions
- Module Actions
- Note Actions
- Note Group Actions
- Task Actions
- Timeline Actions
Case → Count Cases
AI-generatedOverview
The 'Count Cases' operation in the 'Case' resource of the DFIR IRIS node in n8n is designed to retrieve and count cases based on specified criteria. This operation is particularly useful for generating reports or monitoring the number of cases that meet certain conditions.
Use Case Examples
- Generating a report of all cases opened within a specific date range.
- Monitoring the number of cases assigned to a particular owner or reviewer.
- Counting the cases with a specific severity level or state.
Properties
| Name | Meaning |
|---|---|
| Case ID | The unique identifier for the case. This field is required and cannot be left empty. |
| Filter Options | A collection of additional fields to filter cases. This includes options like case IDs, customer ID, case name, description, classification, owner, severity, state, SOC ID, reviewer, and date range. Each option allows for more granular filtering of cases. |
Output
JSON
count- The total number of cases that match the specified filters.
Troubleshooting
- Ensure that all required fields, such as 'Case ID', are provided and correctly formatted.
- Verify that the filter options are correctly specified, especially when using expressions for dynamic values.
- Check for any connectivity issues with the DFIR IRIS system that might affect data retrieval.