Troubleshooting
Problem
In IBM Security Qradar SOAR, you are unable to close multiple incidents at a time. The Incident Close page is blank and the next button is grayed out preventing case closure.
Cause
Having Fields in the Incident Close pane in Customization Settings > Layouts > Close Incident cause this condition.
Environment
IBM Security Qradar SOAR versions 42.x and 43.x.
Resolving The Problem
The solution is to remove Fields from the Incident Close pane. If you want Fields to show when closing bulk incidents, then ensure the Fields requirement tab is set to On Close.
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSIP9Q","label":"IBM Security SOAR"},"ARM Category":[{"code":"a8m0z000000cw4bAAA","label":"Resilient Core"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
15 February 2022
UID
ibm16556766