Exporting Case information?

[drathbo]

Hello. New to security onion and was playing around with the cases in the web ui. For audit and reporting purposes etc is it possible to export case information or at least case summaries (total count over a time, title, open close time, assignee etc)?

[weslambert]

You can generate a CSV report containing records from the so-case index from Discover inside of Kibana.

Additionally, you could create a dashboard inside of SOC to summarize the pertinent information.