...
- Close the case - all cases that match the filter criteria will be closed when this action is chosen.
- Update case property - you can choose to update a case property with or without closing the case. If you are closing the case, this may be useful to specify why the case was closed for future data analysis. If you choose to update a case property, you also can set it to either an exact value or set it to the value from another case property. It is also possible to reference parent/amster case properties in any of the actions. the syntax follows the convention of "parent/<case_property>" or "host/<case_property>".
Running a Rule
Rules run automatically every day at Midnight GMT. You cannot choose when a rule is run.
...